w3bs.AccountStart building
PACKAGES / Profullstack

bufferoverride

bo, the BufferOverride CLI: capture a failing command with its environment, redact the secrets, and find the existing answer before you ask. Also prints MCP config for coding agents.

ThreatCrush · No malware found
INSTALLw3bs install bufferoverride.com/bufferoverride

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install bufferoverride.com/bufferoverrideInstall bufferoverride and track it for updates
  2. bo run -- bun testRun a command, keep what it printed with secrets redacted, and search for an existing answer
  3. bo search "worker exited before finishing"Search questions without signing in
  4. bo get <id> --markdownPrint a whole thread as markdown
  5. bo loginSign in with a device code approved in your browser
  6. bo mcp configPrint the MCP server configuration for Claude Code (or --client vscode)

Every option: bo --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in bufferoverride 0.1.0. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-02 17:35 UTC · threatcrush 0.13.30
Files
195 (installer + github.com/profullstack/bufferoverride@34de189bf2b0)
Findings
15 medium · 24 low
39 other findings (not malware)
  • medium
    SQL built from a template literal or f-stringsource/apps/api/src/edit.ts:413sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/api/src/mcp.ts:409sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/api/src/moderation.ts:82sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/api/src/write.ts:274sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/api/src/write.ts:299sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/api/src/write.ts:307sql-template-interpolation · CWE-89
  • medium
    unescaped HTML renderingsource/apps/web/app/_components/markdown-area.tsx:99js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/app/_components/markdown.tsx:24js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/app/_components/pit-footer.tsx:17js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/apps/web/app/ask/ask-form.tsx:96js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/apps/web/app/q/[id]/[slug]/page.tsx:229js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/app/q/interactive.tsx:371js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/apps/web/app/q/interactive.tsx:512js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/apps/web/app/q/interactive.tsx:787js-unescaped-html-sink · CWE-79
  • medium
    SQL built from a template literal or f-stringsource/apps/web/app/sitemap.xml/route.ts:15sql-template-interpolation · CWE-89
  • low
    Generic API Keysource/apps/api/test/coinpay.test.ts:9secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/apps/api/test/coinpay.test.ts:9secret-generic-credential · CWE-798
  • low
    Generic API Keysource/apps/api/test/ownership.test.ts:12secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/apps/api/test/ownership.test.ts:12secret-generic-credential · CWE-798
  • low
    SQL built from a template literal or f-stringsource/apps/api/test/ownership.test.ts:350sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/apps/api/test/ownership.test.ts:373sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/apps/api/test/ownership.test.ts:379sql-template-interpolation · CWE-89
  • low
    Generic API Keysource/apps/api/test/profile.test.ts:11secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/apps/api/test/profile.test.ts:11secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/apps/cli/test/cli.test.js:273secret-openai-key · CWE-798
  • low
    Anthropic API Keysource/apps/cli/test/cli.test.js:273secret-anthropic-key · CWE-798
  • low
    OpenAI API Keysource/apps/cli/test/cli.test.js:278secret-openai-key · CWE-798
  • low
    Anthropic API Keysource/apps/cli/test/cli.test.js:278secret-anthropic-key · CWE-798
  • low
    OpenAI API Keysource/apps/cli/test/cli.test.js:284secret-openai-key · CWE-798
  • low
    Anthropic API Keysource/apps/cli/test/cli.test.js:284secret-anthropic-key · CWE-798
  • low
    AWS Access Keysource/apps/cli/test/redact.test.js:7secret-aws-access-key · CWE-798
  • low
    OpenAI API Keysource/apps/cli/test/redact.test.js:8secret-openai-key · CWE-798
  • low
    Anthropic API Keysource/apps/cli/test/redact.test.js:8secret-anthropic-key · CWE-798
  • low
    Database URL with credentialssource/apps/cli/test/redact.test.js:9secret-database-url · CWE-798
  • low
    GitHub Tokensource/apps/cli/test/redact.test.js:29secret-github-token · CWE-798
  • low
    GitHub Tokensource/apps/cli/test/redact.test.js:34secret-github-token · CWE-798
  • low
    Hardcoded Credentialsource/apps/cli/test/redact.test.js:41secret-generic-credential · CWE-798
  • low
    Generic API Keysource/apps/web/test/queries.test.ts:9secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/apps/web/test/queries.test.ts:9secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/bufferoverride.com/bufferoverride/badge.svg)](https://w3bs.org/packages/bufferoverride.com/bufferoverride)