registry / @awareness.market/local / 0.20.2
@awareness.market/local@0.20.2
Local-first AI agent memory system. No account needed.
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe scanner’s command-output exfiltration claim resolves to a local daemon launch whose output is written to a log. The postinstall helper handles a declared runtime dependency, while runtime telemetry is a separate product-event path; no concrete attack behavior was established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package installation invokes postinstall; a later CLI start launches the daemon and initializes product telemetry.
Impact
The inspected paths do not establish command-output exfiltration or another concrete attack.
Mechanism
The helper adds Transformers only if it cannot resolve it. The CLI sends daemon output to a local log. Runtime telemetry posts product events to the Awareness API.
AI rationale
The scanner’s command-output exfiltration claim resolves to a local daemon launch whose output is written to a log. The postinstall helper handles a declared runtime dependency, while runtime telemetry is a separate product-event path; no concrete attack behavior was established.
Evidence
package.jsoninstall-transformers.mjsbin/awareness-local.mjssrc/daemon.mjssrc/core/telemetry.mjs.lpm-dependency-evidence-d3c67ba8-751c-4e20-8551-cc0e0b27793a/0/npm-linux/package.json.lpm-dependency-evidence-d3c67ba8-751c-4e20-8551-cc0e0b27793a/0/npm-linux/dist/transformers.node.mjs.lpm-dependency-evidence-d3c67ba8-751c-4e20-8551-cc0e0b27793a/0/npm-linux/dist/transformers.web.js.lpm-dependency-evidence-d3c67ba8-751c-4e20-8551-cc0e0b27793a/0/npm-linux/dist/transformers.js.lpm-dependency-evidence-d3c67ba8-751c-4e20-8551-cc0e0b27793a/0/npm-linux/dist/transformers.min.js.lpm-dependency-evidence-d3c67ba8-751c-4e20-8551-cc0e0b27793a/0/npm-linux/dist/transformers.node.cjs
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs a helper. Transformers is already a declared dependency, and the helper exits when it resolves; if resolution fails, it tries to add that same dependency.
- The CLI subprocess starts this package’s foreground daemon and directs its output to a local log file. The inspected launch path does not send command output to a network recipient.
- Daemon telemetry sends product events to the Awareness API. The event path uses an installation identifier and daemon metadata; it does not establish command-output exfiltration.
- The inspected dependency entrypoints and source files contain Transformers runtime bundles, MCP server and stdio modules, and elliptic-curve code; they do not establish the scanner’s claimed attack behavior.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
bin/awareness-local.mjsView on unpkg · L16bin/cli.cjsView file
3// Wrapper to load the ESM entry point from CommonJS-compatible bin
L4: const { pathToFileURL } = require('node:url');
L5: const { join } = require('node:path');
Findings
1 Critical8 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltasrc/daemon.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShell
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
Affected versions and remediation
This report applies to @awareness.market/local@0.20.2.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.20.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.