@columenlabs/lumen-ui@0.1.117
Lumen: shared React components (frame, views, widgets, charts, drawers).
AI Security Review
scanned 6d ago · by lpm-firewall-aiThis version is a React UI library with no lifecycle scripts in its package metadata. Its network and storage behavior is tied to application features, and the inspected telemetry is mounted by the consuming app and sent to a configurable first-party endpoint.
Decision evidence
public snapshot- Package metadata describes a React component library and routes imports to its `dist` entry points.
- The assistant client builds API requests from a caller-supplied base; its documented default is `/api/assistant`.
- Telemetry starts through `useLumenTelemetry`, which sets the app name and uses `/api/t` by default; the source describes batches of route, error-class, stack-hash and Web Vitals data.
- Query persistence stores successful query state in browser `localStorage` under the `lumen-cache:` prefix.
Source & flagged code
5 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/assistant/lumen-assistant.js#virtual:normalized:round1View on unpkgPackage metadata describes a React component library and routes imports to its `dist` entry points.
package.jsonView on unpkg · L6Findings
Affected versions and remediation
This report applies to @columenlabs/lumen-ui@0.1.117.
See all versions of @columenlabs/lumen-ui for other recorded verdicts.
- Review the evidence and your use of @columenlabs/lumen-ui@0.1.117 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.