registry / @contentful/experience-design-system-cli / 2.37.0
@contentful/experience-design-system-cli@2.37.0
Contentful Experiences design system import CLI
AI Security Review
scanned 18d ago · by lpm-firewall-aiSource inspection found no install hook or concrete attack behavior. Scanner signals correspond to command forwarding, local debug logging, project documentation parsing, and CLI telemetry.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked by a user; debug logs are recorded when a debug run is active, and analytics events are sent during CLI sessions and commands.
Impact
The inspected behaviors support CLI operation and do not establish unauthorized execution, credential disclosure, or harmful mutation.
Mechanism
The CLI forwards commands to its legacy implementation, parses project documentation, writes debug records locally, and sends command telemetry that can be disabled.
AI rationale
Source inspection found no install hook or concrete attack behavior. Scanner signals correspond to command forwarding, local debug logging, project documentation parsing, and CLI telemetry.
Evidence
package.jsondist/index.jsdist/app.jslegacy/dist/src/index.js
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI entrypoint and has no install lifecycle hook.
- The flagged legacy code reads AGENTS.md as project documentation and extracts component relationships from its text.
- The runtime hints render debug logs and write them to a local session directory.
- The app reads a debug setting and redacts the Contentful management token before recording inputs or outputs.
- Legacy analytics sends CLI session and command events and supports disabling analytics.
Evidence against
- The reported child process launches the package's legacy CLI to handle explicit commands; source inspection found no attack behavior in that path.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
567// packages/experience-design-system-cli/src/tui/import/spawn-v1-import.ts
L568: import { spawn as spawn2 } from "node:child_process";
L569: function buildArgs(options) {
High
18Cross-file remote execution chain: dist/index.js spawns legacy/dist/src/index.js; helper contains network access plus dynamic code execution.
L18: while (true) {
L19: const manifestPath = join(dir, "package.json");
L20: if (existsSync(manifestPath)) {
L21: const pkg2 = JSON.parse(readFileSync(manifestPath, "utf8"));
L22: if (pkg2.name === packageName) found = dir;
...
L115: try {
L116: const response = await fetch(TAGS_URL);
L117: if (!response.ok) return { status: "error" };
...
L142: import { useEffect, useState } from "react";
L143: import { useStdout } from "ink";
L144: function readColumns(stdout) {
...
L463: function expandHome(value) {
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/index.jsView on unpkg · L18legacy/dist/src/index.jsView file
Findings
1 Critical3 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltalegacy/dist/src/index.js
HighChild Processdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighSemantic Analysis Limitedlegacy/dist/src/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @contentful/experience-design-system-cli@2.37.0.
See all versions of @contentful/experience-design-system-cli for other recorded verdicts.
- Review the evidence and your use of @contentful/experience-design-system-cli@2.37.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.