@devilsdev/rag-pipeline-utils@2.6.0
Please upgrade to 3.2.0 or later
Composable retrieval-augmented generation (RAG) for Node.js: grounded citations, evaluation, guardrails, hybrid retrieval and a CLI.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe flagged dynamic evaluation is part of a plugin sandbox, with restricted globals, and plugin installation is explicitly invoked. The install hook runs Husky setup; the reviewed source does not show unrelated install-time contact or another concrete attack.
Decision evidence
public snapshot- The package exports its library and CLI through declared entry points.
- The publish hook runs lint, tests, documentation validation and ESM verification; postinstall runs `husky install`.
- The flagged eval reconstructs a plugin function from `plugin.generate.toString()` for isolated plugin execution.
- The plugin sandbox gives the plugin an empty environment and blocks `require()` and `import()`.
- Plugin installation is performed by an explicit CLI operation that passes the selected source and config path to the installer.
- The package has a postinstall hook, but it only runs Husky setup.
- Plugin code is dynamically evaluated, though the surrounding code places it in an isolated VM with restricted globals.
Source & flagged code
8 flaggedTarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
Findings
Affected versions and remediation
This report applies to @devilsdev/rag-pipeline-utils@2.6.0.
See all versions of @devilsdev/rag-pipeline-utils for other recorded verdicts.
- Review the evidence and your use of @devilsdev/rag-pipeline-utils@2.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.