registry / @bigbinary/neeto-editor-frontend / 2.2.7

@bigbinary/neeto-editor-frontend@2.2.7

neetoEditor is the library that drives the rich text experience in all neeto products built at BigBinary

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The package is a rich-text editor, and the flagged network and filesystem code belongs to its document-viewing functionality. The prepare script is limited to husky setup, and review found no credential theft, unrelated data collection, or harmful automatic action.

Static reason

No blocking static signals were detected.

Trigger

Document fetching occurs when the editor's document viewer renders a supplied document; Node-specific module loading is guarded by environment detection.

Impact

No malicious impact identified. Word previews use the Microsoft Office web viewer with the current document URI.

Mechanism

The bundle fetches document URLs for preview and loads filesystem and HTTP modules for Node document processing. No credential collection, unrelated transmission, or destructive file operation was identified.

AI rationale

Network endpoints1

view.officeapps.live.com

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest describes a rich-text editor and exports its library from dist entrypoints.
The prepare script runs husky install; no install-time data collection or unrelated network action was found.
The flagged bundle is imported by a document viewer, which fetches the document URL it is given for preview.
Filesystem and HTTP module imports are inside an isNodeJS guard in the document-processing bundle.

Evidence against

The flagged bundle contains network, filesystem, and environment-variable references, which warranted checking their context.
A Word document preview embeds view.officeapps.live.com using the current document URI.

Behavioral surface

Source

DynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

4 flagged

dist/chunk-CeoqieEt.jsView file

8856const loadPackages = async () => { L8857: const fs = await import( /*webpackIgnore: true*/'fs'), L8858: http = await import( /*webpackIgnore: true*/'http'),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-CeoqieEt.jsView on unpkg · L8856

4182try { L4183: new Function(""); L4184: return true;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-CeoqieEt.jsView on unpkg · L4182

dist/v2/styles.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

Findings

1 Critical1 High4 Medium6 Low

CriticalManifest Confusionpackage.json

HighSemantic Analysis Limiteddist/v2/styles.css

MediumDynamic Requiredist/chunk-CeoqieEt.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/chunk-CeoqieEt.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @bigbinary/neeto-editor-frontend@2.2.7.

See all versions of @bigbinary/neeto-editor-frontend for other recorded verdicts.

Review the evidence and your use of @bigbinary/neeto-editor-frontend@2.2.7 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 04:59:24.045Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @bigbinary/neeto-editor-frontend / 2.2.7

@bigbinary/neeto-editor-frontend@2.2.7

neetoEditor is the library that drives the rich text experience in all neeto products built at BigBinary

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Static reason

No blocking static signals were detected.

Trigger

Document fetching occurs when the editor's document viewer renders a supplied document; Node-specific module loading is guarded by environment detection.

Impact

No malicious impact identified. Word previews use the Microsoft Office web viewer with the current document URI.

Mechanism

AI rationale

Network endpoints1

view.officeapps.live.com

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest describes a rich-text editor and exports its library from dist entrypoints.
The prepare script runs husky install; no install-time data collection or unrelated network action was found.
The flagged bundle is imported by a document viewer, which fetches the document URL it is given for preview.
Filesystem and HTTP module imports are inside an isNodeJS guard in the document-processing bundle.

Evidence against

The flagged bundle contains network, filesystem, and environment-variable references, which warranted checking their context.
A Word document preview embeds view.officeapps.live.com using the current document URI.

Behavioral surface

Source

DynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

4 flagged

dist/chunk-CeoqieEt.jsView file

8856const loadPackages = async () => { L8857: const fs = await import( /*webpackIgnore: true*/'fs'), L8858: http = await import( /*webpackIgnore: true*/'http'),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-CeoqieEt.jsView on unpkg · L8856

4182try { L4183: new Function(""); L4184: return true;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-CeoqieEt.jsView on unpkg · L4182

dist/v2/styles.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

Findings

1 Critical1 High4 Medium6 Low

CriticalManifest Confusionpackage.json

HighSemantic Analysis Limiteddist/v2/styles.css

MediumDynamic Requiredist/chunk-CeoqieEt.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/chunk-CeoqieEt.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @bigbinary/neeto-editor-frontend@2.2.7.

See all versions of @bigbinary/neeto-editor-frontend for other recorded verdicts.

Review the evidence and your use of @bigbinary/neeto-editor-frontend@2.2.7 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 04:59:24.045Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @bigbinary

Behavioral surface

Related packages

More from @bigbinary