Loading npm security reports…

@circuitwall/jarela@1.36.1: Scan Failed npm security report | LPM Firewall

registry / @circuitwall/jarela / 1.36.1

@circuitwall/jarela@1.36.1

⚠ Under review

Jarela — local chat interface for LangGraph agents (multi-provider, single-process, SQLite-backed).

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 24 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 871 file(s), 5.09 MB of source, external domains: 127.0.0.1, 169.254.169.254, a.atlassian.net, a.io, accounts.google.com, acme.atlassian.net, acme.jiraalign.com, ai.google.dev, aistudio.google.com, anthropic.com, anthropic.proxy.internal, api-docs.deepseek.com, api.anthropic.com, api.cohere.com, api.deepseek.com, api.example.com, api.github.com, api.githubcopilot.com, api.openai.com, api.tavily.com, attacker.example, b.io, blog.example, caldav.icloud.com, cdn.example.com, cnn.com, cohere.com, console.anthropic.com, console.cloud.google.com, docs.github.com, docs.langchain.com, duckduckgo.com, entra.microsoft.com, env.anthropic.example, evil.com, example.atlassian.net, example.com, example.org, example.test, foo.example.com, gemini.google, generativelanguage.googleapis.com, github.com, gmail.googleapis.com, graph.microsoft.com, hostname.tail.ts, html.duckduckgo.com, id.atlassian.com, jarela-oauth-proxy-134669812881.europe-west1.run.app, login.microsoftonline.com

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-hint.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

app/api/v1/update/apply/route.tsView file

19import { join } from "node:path"; L20: import { spawn } from "node:child_process"; L21: import { NextResponse } from "next/server";

High

Child Process

Package source references child process execution.

app/api/v1/update/apply/route.tsView on unpkg · L19

app/api/v1/local-file/route.tsView file

137const child = process.platform === "win32" L138: ? spawn("powershell.exe", ["-NoProfile", "-Command", "Start-Process -LiteralPath $args[0]", abs], { detached: true, stdio: "ignore", windowsHide: true }) L139: : process.platform === "darwin"

High

Shell

Package source references shell execution.

app/api/v1/local-file/route.tsView on unpkg · L137

.next/standalone/node_modules/next/dist/compiled/browserslist/index.jsView file

1(()=>{var __webpack_modules__={368:e=>{function BrowserslistError(e){this.name="BrowserslistError";this.message=e;this.browserslist=true;if(Error.captureStackTrace){Error.captureSt...

High

Eval

Package source references dynamic code evaluation.

.next/standalone/node_modules/next/dist/compiled/browserslist/index.jsView on unpkg · L1

scripts/start-prod.mjsView file

31try { L32: const { optimizeClientChunksOnce } = await import("./optimize-client-chunks.mjs"); L33: await optimizeClientChunksOnce();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/start-prod.mjsView on unpkg · L31

lib/embeddings/index.tsView file

48L49: const explicitName = process.env.EMBEDDING_MODEL_CONFIG; L50: // 1) explicit embedding model name (if provided). ... L90: function embeddingCacheKey(modelId: string, text: string): string { L91: return `${modelId}\u0000${createHash("sha1").update(text).digest("base64")}`; L92: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/embeddings/index.tsView on unpkg · L48

scripts/service-install.mjsView file

18Trigger-reachable persistence chain: manifest.bin -> scripts/jarela-bin.mjs -> scripts/service-install.mjs L18: L19: import { spawnSync, execFileSync } from "node:child_process"; L20: import { existsSync, mkdirSync, writeFileSync, unlinkSync, rmSync, chmodSync } from "node:fs"; ... L45: for (const k of PROXY_ENV_KEYS) { L46: const v = process.env[k]; L47: if (v && v.length > 0) out[k] = v; ... L59: if (env && env.length > 0) { L60: return env.startsWith("~") ? env.replace(/^~/, homedir()) : env; L61: } ... L93: if (!existsSync(kc)) continue; L94: let stdout; L95: try {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

scripts/service-install.mjsView on unpkg · L18

18L19: import { spawnSync, execFileSync } from "node:child_process"; L20: import { existsSync, mkdirSync, writeFileSync, unlinkSync, rmSync, chmodSync } from "node:fs"; ... L45: for (const k of PROXY_ENV_KEYS) { L46: const v = process.env[k]; L47: if (v && v.length > 0) out[k] = v; ... L59: if (env && env.length > 0) { L60: return env.startsWith("~") ? env.replace(/^~/, homedir()) : env; L61: } ... L93: if (!existsSync(kc)) continue; L94: let stdout; L95: try {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/service-install.mjsView on unpkg · L18

scripts/update.mjsView file

13import { existsSync, readFileSync } from "node:fs"; L14: import { spawnSync } from "node:child_process"; L15: import { join } from "node:path"; ... L18: const REPO = "CircuitWall/jarela"; L19: const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`; L20: const GH_COMMIT_URL = `https://api.github.com/repos/${REPO}/commits/main`; ... L24: function resolveChannel() { L25: return (process.env.JARELA_UPDATE_CHANNEL ?? "").trim().toLowerCase() === "main" ? "main" : "stable"; L26: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/update.mjsView on unpkg · L13

lib/health/probes.tsView file

12import { resolvePackageAuth } from "@/lib/tools/auth-registry"; L13: import { spawnSync } from "node:child_process"; L14: import type { AtlassianAuth } from "@circuitwall/atlassian-langchain"; ... L22: import { registerDefaultPackages } from "@/lib/tools/default-packages"; L23: if (process.env.NEXT_PHASE !== "phase-production-build") { L24: registerDefaultPackages(); ... L95: try { L96: const res = await fetch(`${auth.url}/rest/api/3/myself`, { L97: headers: { L98: Authorization: "Basic " + Buffer.from(`${auth.email}:${auth.apiToken}`).toString("base64"), L99: Accept: "application/json", ... L195: try {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

lib/health/probes.tsView on unpkg · L12

.next/standalone/node_modules/next/dist/compiled/jest-worker/threadChild.jsView file

1(()=>{"use strict";var __webpack_modules__={994:(e,r)=>{Object.defineProperty(r,"__esModule",{value:true});r.PARENT_MESSAGE_SETUP_ERROR=r.PARENT_MESSAGE_OK=r.PARENT_MESSAGE_CUSTOM=...

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

.next/standalone/node_modules/next/dist/compiled/jest-worker/threadChild.jsView on unpkg · L1

.next/standalone/node_modules/@img/sharp-libvips-linux-x64/lib/libvips-cpp.so.8.18.6View file

•path = .next/standalone/node_modules/@img/sharp-libvips-linux-x64/lib/libvips-cpp.so.8.18.6 kind = native_binary sizeBytes = 18621496 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

.next/standalone/node_modules/@img/sharp-libvips-linux-x64/lib/libvips-cpp.so.8.18.6View on unpkg

scripts/installed-launcher.ps1View file

•path = scripts/installed-launcher.ps1 kind = build_helper sizeBytes = 9857 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/installed-launcher.ps1View on unpkg

.next/standalone/.next/server/chunks/5210.jsView file

•path = .next/standalone/.next/server/chunks/5210.js kind = payload_in_excluded_dir sizeBytes = 6080560 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/standalone/.next/server/chunks/5210.jsView on unpkg

•path = .next/standalone/.next/server/chunks/5210.js kind = oversized_source_file sizeBytes = 6080560 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

.next/standalone/.next/server/chunks/5210.jsView on unpkg

.next/standalone/node_modules/@keyv/serialize/dist/index.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 86

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

.next/standalone/node_modules/@keyv/serialize/dist/index.jsView on unpkg