registry / @agimon-ai/po-container-runtime-linux-arm64 / 0.0.1-alpha.63
@agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.63
Read-only Po server payload for Linux arm64 sandbox containers, mounted at /opt/po and run with Node 24.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThis package is a read-only Linux arm64 server payload with no install-time hook. The reviewed telemetry is documented and can be disabled, and the credential and host matches do not show credential exfiltration or unrelated collection.
Static reason
The scanner resource watchdog stopped analysis before complete coverage. This unresolved result requires AI review and must not be published as clean, warn, or block.
Trigger
The host explicitly starts the packaged server; there is no install hook.
Impact
No malicious impact identified. Startup cleanup is limited to Po-owned legacy state.
Mechanism
The artifact supplies a read-only server runtime. Reviewed credential and host matches resolve to package resolution, documented telemetry, and service-specific OAuth behavior.
AI rationale
This package is a read-only Linux arm64 server payload with no install-time hook. The reviewed telemetry is documented and can be disabled, and the credential and host matches do not show credential exfiltration or unrelated collection.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package has no install lifecycle hook; its only script is a build command.
- The runtime configuration points to the Po server entry in a Linux arm64 payload mounted read-only at /opt/po.
- The flagged .npmrc reference is in code preparing Po layer package resolution, not evidence of sending npm credentials to a foreign host.
- The shipped server security documentation describes diagnostics as lifecycle and coarse usage telemetry, excluding message and tool content.
- Telemetry can be disabled with AGENT_TELEMETRY_DISABLED or OTEL_SDK_DISABLED.
- Automatic startup cleanup is scoped to Po-created legacy Pi entries and the old Po home; retirement waits for migration and a safety scan.
Evidence against
- The server emits runtime telemetry by default, though it is documented and has disable flags.
- Server startup performs automatic cleanup of Po-owned legacy state.
Behavioral surface
Source & flagged code
8 flaggedsource
•stage = scanner_worker; reason = analysis_timeout
High
Semantic Analysis Limited
The scanner resource watchdog stopped semantic analysis before full coverage; route this package to AI without publishing a static verdict.
package.jsonView file
30"exports": {
"./container-runtime.json": "./container-runtime.json",
"./package.json": "./package.json"
},
"publishConfig": {
"access": "public"
},
"scripts": {
"build": "PO_RUNTIME_KIND=container PO_RUNTIME_TARGET=linux-arm64 PO_RUNTIME_OUT_DIR=\"$PWD/runtime\" pnpm --dir ../../clients/po-des
Low
Suspicious Lifecycle Evidence
The package has no install lifecycle hook; its only script is a build command.
package.jsonView on unpkg · L30container-runtime.jsonView file
1{
"target": "linux-arm64",
"payload": "runtime",
"mountPath": "/opt/po",
"node": ">=24",
"entry": "po/dist/bin/serve.mjs",
"environment": {
"NODE_PATH": "/opt/po/node_modules:/opt/po/native/node_modules",
"PO_PACKAGE_ROOT": "/opt/po/node_modules/@agimon-ai/po"
Findings
1 High7 Low
HighSemantic Analysis Limited
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencecontainer-runtime.json
LowAi Review Evidenceruntime/chunks/backgroundSync-DjBRDZRS.mjs
LowSuspicious Lifecycle Evidenceruntime/node_modules/@agimon-ai/po/docs/server/security.md
LowAi Review Evidenceruntime/node_modules/@agimon-ai/po-core/dist/src/services/telemetry/index.mjs
LowAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/src/cli/server/run.mjs
LowAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/src/composition/poHomeMigration/index.mjs
Affected versions and remediation
This report applies to @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.63.
See all versions of @agimon-ai/po-container-runtime-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.63 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.