registry / @dotenvx/dotenvx / 2.28.1
@dotenvx/dotenvx@2.28.1
a secure dotenv–from the creator of `dotenv`
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged network and credential behavior is consistent with dotenvx’s explicitly configured Armor proxy and 1Password integration. The package manifest has no install lifecycle hook, and the reviewed credential flow restricts forwarding to the credential’s configured host.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicitly running a command through dotenvx with configured Armor credentials, or selecting the 1Password credential store.
Impact
No unauthorized collection or unrelated credential transmission was identified.
Mechanism
The proxy forwards matching credential placeholders through the configured Armor service and restricts credentials to their configured destination host. The 1Password integration reads a configured vault reference and verifies the returned key.
AI rationale
The flagged network and credential behavior is consistent with dotenvx’s explicitly configured Armor proxy and 1Password integration. The package manifest has no install lifecycle hook, and the reviewed credential flow restricts forwarding to the credential’s configured host.
Evidence
OS temporary directory: dxp-* (proxy CA and preload files)
Network endpoints2
${session.hostname()}/api/proxyVERSION_URL
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares no install, preinstall, or postinstall lifecycle hook.
- The credential proxy is activated only for configured credentials whose environment values match their placeholders; otherwise it returns without starting.
- The proxy rejects a credential used for a host other than the credential’s configured destination.
- The 1Password integration retrieves a key using its configured 1Password reference and checks that it matches the public key.
Evidence against
- The CLI run command can start a local proxy and add it to the child process environment when Armor credentials are configured.
- A version check fetches version information from the package’s configured version service.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedsrc/cli/help.jsView file
86patternName = private_key_openssh
severity = critical
line = 86
Critical
Critical Secret
Package contains a critical-looking secret pattern.
src/cli/help.jsView on unpkg · L8686patternName = private_key_openssh
severity = critical
line = 86
Critical
src/lib/helpers/ptyCommand.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
2 Critical2 High2 Medium6 Low
CriticalCritical Secretsrc/cli/help.js
CriticalSecret Patternsrc/cli/help.js
HighSemantic Analysis Limitedsrc/lib/helpers/ptyCommand.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltasrc/lib/custodians/local/onepassword.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencesrc/lib/proxy/configureProxy.js
Affected versions and remediation
This report applies to @dotenvx/dotenvx@2.28.1.
See all versions of @dotenvx/dotenvx for other recorded verdicts.
- Review the evidence and your use of @dotenvx/dotenvx@2.28.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.