@columenlabs/lumen-ui@0.1.167
Lumen: shared React components (frame, views, widgets, charts, drawers).
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package is a React UI library with browser-local query caching and documented, first-party telemetry activated through an app-mounted hook. Its API clients use caller-supplied base paths, and the inspected code shows no unrelated credential or data collection.
Decision evidence
public snapshot- The manifest describes a React component library and exposes its UI, people, and assistant modules.
- Query persistence is browser-only and stores the query cache in localStorage.
- Telemetry is documented as first-party app telemetry that omits error messages, query strings, page text, and typed input.
- Telemetry starts through an exported hook that an app mounts at its root.
- Assistant and people clients send requests through caller-supplied API base paths.
Source & flagged code
7 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/assistant/lumen-assistant.js#virtual:normalized:round1View on unpkgThe manifest describes a React component library and exposes its UI, people, and assistant modules.
package.jsonView on unpkg · L1Findings
Affected versions and remediation
This report applies to @columenlabs/lumen-ui@0.1.167.
See all versions of @columenlabs/lumen-ui for other recorded verdicts.
- Review the evidence and your use of @columenlabs/lumen-ui@0.1.167 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.