@dotenvx/dotenvx@2.30.0
a secure dotenv–from the creator of `dotenv`
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package is not malicious, but its CLI reports operation metadata—including local paths and key names—to the Armor service when a session is active. The opt-out does not establish that this runtime telemetry is disclosed, so this warrants a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A tracked CLI command runs while Armor is enabled and has a usable session token.
Impact
The service can learn which commands ran and receive local paths, key names, and selected option values; this is a runtime telemetry concern, not evidence of credential theft.
Mechanism
The CLI records allowlisted metadata and selected options, then delivers events to the session hostname’s /api/events endpoint. DOTENVX_NO_ARMOR and command options can disable this backend.
AI rationale
The package is not malicious, but its CLI reports operation metadata—including local paths and key names—to the Armor service when a session is active. The opt-out does not establish that this runtime telemetry is disclosed, so this warrants a warning.
Evidence
src/lib/events/metadata.jssrc/lib/events/cli.jssrc/lib/events/index.jssrc/lib/events/backends/armor.js
Network endpoints1
Armor session hostname at /api/events
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- CLI commands record operation names, outcomes, file paths, key names, and selected options as events.
- When Armor is enabled and a session token is available, the event backend sends those events to the session hostname.
- The package has an opt-out for this event backend through DOTENVX_NO_ARMOR or command options.
Evidence against
- The package entry point is src/lib/main.js; package metadata declares no install lifecycle scripts.
- Event metadata uses an allowlist and does not copy arbitrary command options or debug logs.
- The 1Password integration reads and stores keys through the user’s selected 1Password account; its set operation requires invoking the integration.
- Credential proxying requires configured placeholder credentials and an Armor token, and forwards requests to the configured credential host.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
6 flaggedsrc/cli/help.jsView file
87patternName = private_key_openssh
severity = critical
line = 87
Critical
Critical Secret
Package contains a critical-looking secret pattern.
src/cli/help.jsView on unpkg · L8787patternName = private_key_openssh
severity = critical
line = 87
Critical
src/lib/helpers/ptyCommand.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
2 Critical2 High4 Medium4 Low
CriticalCritical Secretsrc/cli/help.js
CriticalSecret Patternsrc/cli/help.js
HighSemantic Analysis Limitedsrc/lib/helpers/ptyCommand.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltasrc/lib/custodians/local/onepassword.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencesrc/lib/events/metadata.js
MediumAi Review Evidencesrc/lib/events/cli.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @dotenvx/dotenvx@2.30.0.
See all versions of @dotenvx/dotenvx for other recorded verdicts.
- Review the evidence and your use of @dotenvx/dotenvx@2.30.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.