@bigbinary/neeto-editor-frontend@2.0.9
neetoEditor is the library that drives the rich text experience in all neeto products built at BigBinary
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest’s prepare hook only runs husky, and the exported entry points expose editor modules. The flagged dynamic require is guarded Node.js crypto loading, while the inspected network calls support attachment uploads; no unrelated data collection or attack behavior was found.
Decision evidence
public snapshot- The package exports editor modules from dist entry points.
- The only lifecycle script is prepare: husky install.
- The flagged dynamic require is guarded Node.js loading of the crypto module.
- The axios calls in the attachment chunk handle upload operations.
- No malicious behavior was identified in the inspected entry points or flagged code.
Source & flagged code
4 flaggedPackage source references a known benign dynamic code generation pattern.
dist/chunk-CeoqieEt.jsView on unpkg · L4182Package source references dynamic require/import behavior.
dist/chunk-OP-lX765.jsView on unpkg · L66Findings
Affected versions and remediation
This report applies to @bigbinary/neeto-editor-frontend@2.0.9.
See all versions of @bigbinary/neeto-editor-frontend for other recorded verdicts.
- Review the evidence and your use of @bigbinary/neeto-editor-frontend@2.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.