registry / @awareness.market/local / 0.20.0
@awareness.market/local@0.20.0
⚠ Under reviewLocal-first AI agent memory system. No account needed.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected lifecycle and runtime code show a fallback installer for a declared feature dependency, not verified attack behavior. The selected dependency source could not be inspected, so the review remains unresolved.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package installation invokes the postinstall helper; embedding code imports the dependency when used.
Impact
The available source does not establish an attack, but the uninspected dependency prevents a clean determination.
Mechanism
The helper checks for the declared dependency and attempts a package-manager install if it cannot resolve it. The dependency implementation itself was not available for inspection.
AI rationale
The inspected lifecycle and runtime code show a fallback installer for a declared feature dependency, not verified attack behavior. The selected dependency source could not be inspected, so the review remains unresolved.
Evidence
package.jsoninstall-transformers.mjssrc/core/embedder.mjs
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares @huggingface/transformers as a runtime dependency and runs install-transformers.mjs during postinstall.
- The embedder dynamically imports that dependency and falls back when it is unavailable; the dependency source could not be resolved in this review.
- The browser-opening handler restricts its URL to the package's awareness.market host.
Evidence against
- The postinstall helper checks whether the declared dependency is installed before attempting a fallback install.
- The inspected source does not establish data theft, destructive behavior, or command-output exfiltration.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
bin/awareness-local.mjsView on unpkg · L16bin/cli.cjsView file
3// Wrapper to load the ESM entry point from CommonJS-compatible bin
L4: const { pathToFileURL } = require('node:url');
L5: const { join } = require('node:path');
Findings
1 Critical8 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltasrc/daemon/api-handlers.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShell
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
Affected versions and remediation
This report applies to @awareness.market/local@0.20.0.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.20.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.