registry / @awareness.market/local / 0.20.1
@awareness.market/local@0.20.1
Local-first AI agent memory system. No account needed.
AI Security Review
scanned 13d ago · by lpm-firewall-aiSource inspection found an automatic postinstall fallback for the declared Transformers dependency and a URL-validated browser opener, but no concrete attack behavior. The scanner’s command-execution signal resolves to opening an approved site, not command-output exfiltration.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package installation runs the postinstall check; the browser opener runs when its API route is invoked with an accepted URL.
Impact
No confirmed attack surface was established in the inspected behavior; the fallback may add the declared dependency to the current project.
Mechanism
The postinstall exits if Transformers resolves and otherwise selects a package-manager command for that dependency. The API handler checks the URL prefix before passing it to the platform browser opener.
AI rationale
Source inspection found an automatic postinstall fallback for the declared Transformers dependency and a URL-validated browser opener, but no concrete attack behavior. The scanner’s command-execution signal resolves to opening an approved site, not command-output exfiltration.
Evidence
package.jsoninstall-transformers.mjssrc/daemon/api-handlers.mjs
Network endpoints1
awareness.market/
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall checks for its declared Transformers dependency and exits when it is available; its fallback installs only that dependency.
- The flagged process execution opens a browser only for an HTTPS URL under awareness.market.
- The CLI wrapper loads the package’s ESM entry point; the public API uses localhost, and the daemon is documented as loopback-bound.
- The inspected dependency manifests and entry files show Transformers, MCP server transport, and elliptic-curve library code; no attack behavior was identified in the inspected paths.
- The embed function passes its input text through the pipeline and returns the output as a Float32Array.
Evidence against
- The scanner’s command-execution signal does not establish command-output exfiltration: the inspected API handler validates an awareness.market URL before invoking the browser opener.
- The postinstall runs automatically and can add the already-declared Transformers dependency to the current project if the package-local resolution check fails.
Behavioral surface
ChildProcess
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
bin/awareness-local.mjsView on unpkg · L16bin/cli.cjsView file
3// Wrapper to load the ESM entry point from CommonJS-compatible bin
L4: const { pathToFileURL } = require('node:url');
L5: const { join } = require('node:path');
Findings
1 Critical8 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltasrc/daemon/api-handlers.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShell
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
Affected versions and remediation
This report applies to @awareness.market/local@0.20.1.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.20.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.