coupling-router
Warn
Audited by Socket on Oct 29, 2026
1 alert found:
SecuritySecurityscripts/worktree-federation.ts
MEDIUMSecurityMEDIUM
scripts/worktree-federation.ts
This is a readable Git worktree-management utility with no evident malware, credential theft, or network activity. Its primary security concern is destructive data loss: quarantine can reset tracked changes and delete untracked files without actually preserving staged changes, and sweep can force-remove worktrees when pruning is enabled. Treat quarantine and prune operations as high-impact and verify backups and inputs before use; severity is moderate to high for data integrity, with no malicious intent evident.
Confidence: 98%Severity: 72%
Audit Metadata