@carbon/ai-chat@1.23.0

⚠ Under review

Be sure to review the [chat documentation](https://chat.carbondesignsystem.com/tag/latest/docs/documents/Overview.html).

AI Security Review

scanned 14d ago · by lpm-firewall-ai

The inspected telemetry configuration is consistent with package-aligned telemetry and does not show an attack. The source for @carbon/ai-chat-components, a directly imported runtime dependency, was unavailable, so the review remains unresolved.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing the package entrypoint loads @carbon/ai-chat-components.

Impact

The unavailable dependency prevents ruling out behavior in the imported code; the inspected telemetry configuration does not establish an attack.

Mechanism

The entrypoint imports modules from that dependency, but its source archive could not be inspected; the package postinstall separately invokes IBM telemetry with a package-provided configuration.

AI rationale

Evidence

package.jsondist/es/aiChatEntry.jstelemetry.yml

Network endpoints1

www-api.ibm.com/ibm-telemetry/v1/metrics

Decision evidence

public snapshot

AI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.

AI review observations

The package postinstall invokes IBM telemetry, and its entrypoint imports @carbon/ai-chat-components, whose source was unresolved in the supplied inspection.
The package declares @carbon/ai-chat-components as a runtime dependency; source review could not resolve that dependency’s archive.
The inspected Carbon utilities dependency also runs IBM telemetry at postinstall, and its entrypoint re-exports a number library.

Evidence against

The package telemetry configuration targets IBM’s telemetry endpoint and limits collection to listed component attributes; dependency, function, and token collection are disabled.
The inspected Carbon utilities entrypoint contains imports and exports, with no observed install-time behavior in that file.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 42 file(s), 2.07 MB of source, external domains: cloud.ibm.com, www.w3.org

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = ibmtelemetry --config=telemetry.yml

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = ibmtelemetry --config=telemetry.yml

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

166"postinstall": "ibmtelemetry --config=telemetry.yml", "start": "concurrently \"rollup -c ./tasks/rollup.aichat.js --watch\" \"typedoc --watch

Low

Suspicious Lifecycle Evidence

The package postinstall invokes IBM telemetry, and its entrypoint imports @carbon/ai-chat-components, whose source was unresolved in the supplied inspection.

package.jsonView on unpkg · L166

141"@carbon/ai-chat-components": "^1.13.0", "@carbon/icons": "^11.53.0", "@carbon/uti

Findings

1 High1 Medium10 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Dependency Evidencepackage.json

LowSuspicious Lifecycle Evidencedist/es/aiChatEntry.js

LowSuspicious Lifecycle Evidencetelemetry.yml

LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-ed7da8d7-7e98-4651-bf99-ad2c6287893c/2/npm-linux/package.json

LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-ed7da8d7-7e98-4651-bf99-ad2c6287893c/2/npm-linux/es/index.js

Affected versions and remediation

This report applies to @carbon/ai-chat@1.23.0.

See all versions of @carbon/ai-chat for other recorded verdicts.

Review the evidence and your use of @carbon/ai-chat@1.23.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 15:03:52.588Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @carbon/ai-chat / 1.23.0

@carbon/ai-chat@1.23.0

⚠ Under review

Be sure to review the [chat documentation](https://chat.carbondesignsystem.com/tag/latest/docs/documents/Overview.html).

AI Security Review

scanned 14d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

Importing the package entrypoint loads @carbon/ai-chat-components.

Impact

The unavailable dependency prevents ruling out behavior in the imported code; the inspected telemetry configuration does not establish an attack.

Mechanism

The entrypoint imports modules from that dependency, but its source archive could not be inspected; the package postinstall separately invokes IBM telemetry with a package-provided configuration.

AI rationale

Evidence

package.jsondist/es/aiChatEntry.jstelemetry.yml

Network endpoints1

www-api.ibm.com/ibm-telemetry/v1/metrics

Decision evidence

public snapshot

AI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.

AI review observations

The package postinstall invokes IBM telemetry, and its entrypoint imports @carbon/ai-chat-components, whose source was unresolved in the supplied inspection.
The package declares @carbon/ai-chat-components as a runtime dependency; source review could not resolve that dependency’s archive.
The inspected Carbon utilities dependency also runs IBM telemetry at postinstall, and its entrypoint re-exports a number library.

Evidence against

The package telemetry configuration targets IBM’s telemetry endpoint and limits collection to listed component attributes; dependency, function, and token collection are disabled.
The inspected Carbon utilities entrypoint contains imports and exports, with no observed install-time behavior in that file.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 42 file(s), 2.07 MB of source, external domains: cloud.ibm.com, www.w3.org

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = ibmtelemetry --config=telemetry.yml

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = ibmtelemetry --config=telemetry.yml

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

166"postinstall": "ibmtelemetry --config=telemetry.yml", "start": "concurrently \"rollup -c ./tasks/rollup.aichat.js --watch\" \"typedoc --watch

Low

Suspicious Lifecycle Evidence

The package postinstall invokes IBM telemetry, and its entrypoint imports @carbon/ai-chat-components, whose source was unresolved in the supplied inspection.

package.jsonView on unpkg · L166

141"@carbon/ai-chat-components": "^1.13.0", "@carbon/icons": "^11.53.0", "@carbon/uti

Findings

1 High1 Medium10 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Dependency Evidencepackage.json

LowSuspicious Lifecycle Evidencedist/es/aiChatEntry.js

LowSuspicious Lifecycle Evidencetelemetry.yml

LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-ed7da8d7-7e98-4651-bf99-ad2c6287893c/2/npm-linux/package.json

LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-ed7da8d7-7e98-4651-bf99-ad2c6287893c/2/npm-linux/es/index.js

Affected versions and remediation

This report applies to @carbon/ai-chat@1.23.0.

See all versions of @carbon/ai-chat for other recorded verdicts.

Review the evidence and your use of @carbon/ai-chat@1.23.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 15:03:52.588Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.