@ottocode/sdk

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/65d9c69cc3f8d9984f46025c23341ee50ea6ca51/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/65d9c69cc3f8d9984f46025c23341ee50ea6ca51/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/65d9c69cc3f8d9984f46025c23341ee50ea6ca51/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/65d9c69cc3f8d9984f46025c23341ee50ea6ca51/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/65d9c69cc3f8d9984f46025c23341ee50ea6ca51/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/65d9c69cc3f8d9984f46025c23341ee50ea6ca51/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/ab006ea4957ab9664b97a85be1f53763afe80d7e/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/ab006ea4957ab9664b97a85be1f53763afe80d7e/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/ab006ea4957ab9664b97a85be1f53763afe80d7e/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/ab006ea4957ab9664b97a85be1f53763afe80d7e/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/ab006ea4957ab9664b97a85be1f53763afe80d7e/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/ab006ea4957ab9664b97a85be1f53763afe80d7e/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/40dc80dd71e141d68a419f036334c92f862f64d5/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/40dc80dd71e141d68a419f036334c92f862f64d5/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/40dc80dd71e141d68a419f036334c92f862f64d5/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/40dc80dd71e141d68a419f036334c92f862f64d5/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/40dc80dd71e141d68a419f036334c92f862f64d5/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/40dc80dd71e141d68a419f036334c92f862f64d5/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/23f3bd3567ee225c55ba050e8c7162a7114edda6/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/23f3bd3567ee225c55ba050e8c7162a7114edda6/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/23f3bd3567ee225c55ba050e8c7162a7114edda6/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/23f3bd3567ee225c55ba050e8c7162a7114edda6/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/23f3bd3567ee225c55ba050e8c7162a7114edda6/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/23f3bd3567ee225c55ba050e8c7162a7114edda6/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/41c4912aedd21cfda45f38a0a343438f41823c48/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/41c4912aedd21cfda45f38a0a343438f41823c48/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/41c4912aedd21cfda45f38a0a343438f41823c48/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/41c4912aedd21cfda45f38a0a343438f41823c48/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/41c4912aedd21cfda45f38a0a343438f41823c48/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/41c4912aedd21cfda45f38a0a343438f41823c48/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/3b5937a504285824bf892f9a9756841b1313f924/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/3b5937a504285824bf892f9a9756841b1313f924/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/3b5937a504285824bf892f9a9756841b1313f924/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/3b5937a504285824bf892f9a9756841b1313f924/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/3b5937a504285824bf892f9a9756841b1313f924/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/3b5937a504285824bf892f9a9756841b1313f924/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/338a0215de955b4fbd26f045e503a783b1d06f5d/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/338a0215de955b4fbd26f045e503a783b1d06f5d/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/338a0215de955b4fbd26f045e503a783b1d06f5d/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/338a0215de955b4fbd26f045e503a783b1d06f5d/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/338a0215de955b4fbd26f045e503a783b1d06f5d/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/338a0215de955b4fbd26f045e503a783b1d06f5d/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/33205b6e7f5bfe7cd3f739e7b688cc8d80839add/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/33205b6e7f5bfe7cd3f739e7b688cc8d80839add/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/33205b6e7f5bfe7cd3f739e7b688cc8d80839add/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/33205b6e7f5bfe7cd3f739e7b688cc8d80839add/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/33205b6e7f5bfe7cd3f739e7b688cc8d80839add/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/33205b6e7f5bfe7cd3f739e7b688cc8d80839add/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/a3771f6af9555f05ac5037efb24ca3e4448ec71f/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/a3771f6af9555f05ac5037efb24ca3e4448ec71f/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/a3771f6af9555f05ac5037efb24ca3e4448ec71f/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/a3771f6af9555f05ac5037efb24ca3e4448ec71f/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/a3771f6af9555f05ac5037efb24ca3e4448ec71f/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/a3771f6af9555f05ac5037efb24ca3e4448ec71f/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/f1108c17e67b4d1599b829ba56d7aaca0b7065cd/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/f1108c17e67b4d1599b829ba56d7aaca0b7065cd/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/f1108c17e67b4d1599b829ba56d7aaca0b7065cd/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/f1108c17e67b4d1599b829ba56d7aaca0b7065cd/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/f1108c17e67b4d1599b829ba56d7aaca0b7065cd/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/f1108c17e67b4d1599b829ba56d7aaca0b7065cd/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/470555a5b529323608e4b405695b973c5074ef1a/src/core/src/mcp/client.ts#L84 82 | command: this.config.command, 83 | args: this.config.args, > 84 | env: { ...process.env, ...env } as Record<string, string>, 85 | cwd: this.config.cwd, 86 | stderr: 'pipe',

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/470555a5b529323608e4b405695b973c5074ef1a/src/core/src/terminals/manager.ts#L38 36 | rows: 30, 37 | cwd: options.cwd, > 38 | env: { 39 | ...process.env, 40 | ...options.env,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/470555a5b529323608e4b405695b973c5074ef1a/src/core/src/tools/bin-manager.ts#L105 103 | const loginEnv = 104 | envMode === 'minimal' ? null : getLoginShellEnv(envMode === 'login-fresh'); > 105 | const env = { 106 | ...process.env, 107 | ...(loginEnv ?? {}),

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/470555a5b529323608e4b405695b973c5074ef1a/src/core/src/tools/bin-manager.ts#L143 141 | 142 | if (process.platform === 'win32') { > 143 | cachedLoginEnv = { key: cacheKey, env: { ...process.env } }; 144 | return cachedLoginEnv.env; 145 | }

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/470555a5b529323608e4b405695b973c5074ef1a/src/core/src/tools/bin-manager.ts#L156 154 | timeout: 10000, 155 | stdio: ['ignore', 'pipe', 'ignore'], > 156 | env: { 157 | ...process.env, 158 | HOME: home,

[Reject — re-review on republish] (prior reject: AI (semgrep): Wholesale spreading of process.env into subprocess environments is a persistent pattern in this package that risks leaking all host secrets to child processes.) Spreading entire process.env into an object — may capture all secrets Source: https://github.com/nitishxyz/otto/blob/470555a5b529323608e4b405695b973c5074ef1a/src/core/src/tools/bin-manager.ts#L204 202 | timeout: 1500, 203 | stdio: ['ignore', 'pipe', 'ignore'], > 204 | env: { 205 | ...process.env, 206 | HOME: home,

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.