Warden weekly sweep

[github-actions]

Warden Scheduled Scan Results

Run: 2026-08-17T06:29:57.244Z
Commit: e6ef59b

Summary

Severity	Count
Medium	2

Findings

src/cli/commands/daemon.ts

• NSQ-VCB handleLogs loads full log into memory despite only needing tail output (L260) · medium
  handleLogs reads the entire daemon log file with readFileSync even though only the last tail lines are returned. Daemon log rotation bounds the active log to roughly 10 MB at startup, so memory usage is not unbounded, but the read still loads far more data than needed and scales with file size rather than the tail limit.

src/cli/daemon-control.ts

• U9V-Z79 startDaemonForeground promise hangs on spawn failure (L241-L260) · medium
  Missing error event handler on the spawned child process means the returned promise never resolves if the executable cannot be found.

---

Generated by Warden