registry / @awareness.market/local / 0.21.1
@awareness.market/local@0.21.1
Local-first memory for AI agents. Structured synthetic memory cards (decision / preference / risk), verifiable state history via ERC-8350, hybrid search. Runs offline, no account.
AI Security Review
scanned 8d ago · by lpm-firewall-aiDefault-enabled telemetry can transmit installation and platform metadata before the user makes an affirmative choice. Its first-party destination and limited fields reduce the risk, and no concrete malicious behavior or unrelated credential transfer was established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user starts the daemon, which initializes telemetry and records a daemon-start event.
Impact
Installation and platform metadata can leave the device without an affirmative opt-in before the first event is queued.
Mechanism
Telemetry is enabled unless explicitly disabled, and queued events are posted to the configured endpoint, which defaults to awareness.market. The onboarding checkbox is checked by default.
AI rationale
Default-enabled telemetry can transmit installation and platform metadata before the user makes an affirmative choice. Its first-party destination and limited fields reduce the risk, and no concrete malicious behavior or unrelated credential transfer was established.
Evidence
src/core/telemetry.mjssrc/daemon.mjssrc/web/onboarding/steps.js
Network endpoints1
awareness.market/api/v1/telemetry/events
Decision evidence
public snapshotAI called this Suspicious at 76.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The postinstall hook runs a helper that checks for the package’s declared transformer dependency and conditionally invokes a package manager if it is missing.
- Telemetry is enabled unless explicitly disabled, and its default endpoint is the package’s own awareness.market service.
- Starting the daemon queues a daemon-start event containing platform, runtime version, architecture, locale, and status fields.
- The telemetry client sends queued events to its endpoint in a POST request.
- The onboarding telemetry checkbox is checked by default, so the initial daemon event can be queued before the user changes that setting.
- The separate publish request requires apiBase and sends its API key to that configured destination when the publish action is invoked.
Evidence against
- The telemetry properties are whitelisted and sanitized; the inspected startup event contains platform metadata rather than project contents or credentials.
- The inspected install hook concerns resolving or installing the declared transformer dependency; it does not establish an install-time telemetry send.
- No unrelated credential recipient or concrete malicious behavior was established.
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
bin/awareness-local.mjsView on unpkg · L16bin/cli.cjsView file
3// Wrapper to load the ESM entry point from CommonJS-compatible bin
L4: const { pathToFileURL } = require('node:url');
L5: const { join } = require('node:path');
Findings
1 Critical8 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltasrc/daemon/api-handlers.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShell
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
Affected versions and remediation
This report applies to @awareness.market/local@0.21.1.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.21.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.