@bigbinary/neeto-editor-frontend
neetoEditor is the library that drives the rich text experience in all neeto products built at BigBinary
This report shows the evidence for @bigbinary/neeto-editor-frontend@2.5.0. 0 of 22 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 16h ago · by lpm-firewall-aiThe manifest and entry points match a rich text editor package, and the only lifecycle script is `prepare: husky install`. The flagged network and environment references appear tied to editor data loading, warnings, and formatting; no unrelated collector or automatic secret access was identified.
Decision evidence
public snapshot- The manifest describes a rich text editor library and exports editor components and utilities.
- The only lifecycle script is `prepare: husky install`; there is no install, preinstall, or postinstall hook.
- The main entry point exports editor components and imports editor-related chunks.
- The network helper fetches caller-provided URLs and returns response data; no fixed collector endpoint appears in the inspected code.
- The inspected environment-variable use controls editor warnings and terminal color behavior.
- The bundled code includes fetch and XMLHttpRequest helpers, as well as environment-variable references.
Source & flagged code
5 flaggedPackage source references dynamic require/import behavior.
dist/chunk-CeoqieEt.jsView on unpkg · L8856Package source references a known benign dynamic code generation pattern.
dist/chunk-CeoqieEt.jsView on unpkg · L4182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
Affected versions and remediation
This report applies to @bigbinary/neeto-editor-frontend@2.5.0.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @bigbinary/neeto-editor-frontend@2.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.