@aggroot-team/aggroot
AggRoot - AI Assistant (Node.js/TypeScript Version)
This report shows the evidence for @aggroot-team/aggroot@1.13.12. 0 of 21 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 14h ago · by lpm-firewall-aiThe manifest declares no install hook, and the reviewed credential references associate keys with their corresponding AI-provider endpoints. The flagged CLI and web assets have ordinary startup and diagram-rendering behavior; no unrelated collection or unauthorized account action was identified.
Decision evidence
public snapshot- The manifest points to dist/index.cjs and dist/cli.cjs and declares development, build, publish, and test scripts; no install lifecycle hook is declared.
- The CLI wrapper respawns the package's own dist/index.cjs with inherited environment and stdio to raise Node's heap limit.
- The UI maps provider API key settings to their corresponding provider base URLs, including OpenAI and Anthropic.
- The flagged flowDiagram asset contains flowchart parsing and rendering logic.
Source & flagged code
9 flaggedPackage source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2Package ships native binary artifacts.
dist/native/better_sqlite3.nodeView on unpkgFindings
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.13.12.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @aggroot-team/aggroot@1.13.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.