registry / @devilsdev/rag-pipeline-utils / 2.5.0
@devilsdev/rag-pipeline-utils@2.5.0
Please upgrade to 3.2.0 or later
Composable retrieval-augmented generation (RAG) for Node.js: grounded citations, evaluation, guardrails, hybrid retrieval and a CLI.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe scanner's eval and network signals resolve to plugin execution in an isolated VM and intended provider or registry requests. The postinstall command is Husky setup, and inspected runtime paths show no concrete attack behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
User-invoked plugin execution, provider requests, or plugin-hub operations.
Impact
No concrete attack impact was established.
Mechanism
Plugin code is reconstructed for execution in an isolated VM; provider credentials and plugin-hub requests are bound to their configured service endpoints.
AI rationale
The scanner's eval and network signals resolve to plugin execution in an isolated VM and intended provider or registry requests. The postinstall command is Husky setup, and inspected runtime paths show no concrete attack behavior.
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a RAG library and CLI; its only install lifecycle command is Husky setup.
- The flagged eval reconstructs a supplied plugin function for execution in an isolated VM; provider connectors send configured keys to their API base URLs, and plugin-hub requests and analytics use the configured registry.
- The inspected runtime paths implement retrieval, scoring, loading, diagnostics, CLI, plugin verification, and audit features; the inspected dependencies are Ajv validators and Axios HTTP client.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = husky install
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/index.cjsView file
32var getLogLevel = () => {
L33: if (process.env.LOG_LEVEL) {
L34: const level = process.env.LOG_LEVEL.toLowerCase();
...
L228: if (publicKey instanceof crypto.KeyObject) {
L229: keyObject = publicKey.type === "private" ? crypto.createPublicKey(publicKey) : publicKey;
L230: } else if (Buffer.isBuffer(publicKey) && publicKey.length === 32) {
...
L238: } else if (typeof publicKey === "string" && HEX_KEY_RE.test(publicKey)) {
L239: keyObject = rawToKeyObject(Buffer.from(publicKey, "hex"));
L240: } else if (typeof publicKey === "string" && publicKey.includes("-----BEGIN")) {
...
L263: function computeContentDigest({ files = [], baseDir, contents = {} } = {}) {
L264: const root = path.resolve(baseDir || process.cwd());
L265: const entries = /* @__PURE__ */ new Map();
Findings
1 Critical3 High4 Medium7 Low
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limitedsrc/cli/commands/plugin-hub/local-commands.js#virtual:normalized:round1
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/index.cjs
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @devilsdev/rag-pipeline-utils@2.5.0.
See all versions of @devilsdev/rag-pipeline-utils for other recorded verdicts.
- Review the evidence and your use of @devilsdev/rag-pipeline-utils@2.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.