registry / @blendsdk/lockstep / 1.1.0

@blendsdk/lockstep@1.1.0

A comprehensive monorepo package management tool that maintains synchronized versions across all packages (lockstep versioning) with flexible CI/CD integration.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The explicit publish command has shell-command-injection exposure. User-controlled CLI values and repository-controlled branch/tag strings reach execSync through interpolated command strings.

Static reason

No blocking static signals were detected.

Trigger

Run lockstep publish with a crafted --tag/--access value, or run it in a repository with a crafted branch or tag.

Impact

Arbitrary commands may run with the privileges of the developer or CI release job.

Mechanism

Shell command construction from unvalidated CLI and Git metadata.

Rationale

No malicious install-time behavior or data theft was found, but direct interpolation into execSync creates a concrete arbitrary-command-execution risk in a release/CI tool.

Evidence

dist/provenance.jsdist/lockstep.jsdist/cli.jspackage.jsonpackages/**/package.json

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

dist/provenance.js builds shell command with unvalidated access and tag.
dist/lockstep.js executes that command via execSync.

@blendsdk/lockstep@1.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code