registry / @dotenvx/dotenvx / 2.32.2
@dotenvx/dotenvx@2.32.2
a secure dotenv–from the creator of `dotenv`
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the reviewed credential flows are gated by user configuration and an Armor session. The flagged secret pattern is an example in CLI help, while the added 1Password custodian accesses configured dotenvx keys through the local 1Password CLI.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The proxy runs with an explicit `dotenvx run` command when configured credential placeholders are present.
Impact
Configured credentials are routed for the requested service operation; no unrelated collection or automatic account action was identified.
Mechanism
It forwards eligible credential-bearing requests through the HTTPS Armor hostname from the user's session; 1Password reads configured key references using the local CLI.
AI rationale
The package has no install lifecycle hook, and the reviewed credential flows are gated by user configuration and an Armor session. The flagged secret pattern is an example in CLI help, while the added 1Password custodian accesses configured dotenvx keys through the local 1Password CLI.
Evidence
os.tmpdir()/dxp-*/ca.pemos.tmpdir()/dxp-*/proxy-preload.cjs
Network endpoints1
session.hostname()/api/proxy (configured Armor host)
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest lists development and release scripts, with no install or lifecycle hook.
- The `run` action passes credentials prepared for the requested command to the proxy configuration.
- The proxy does nothing when no environment value matches a configured credential placeholder; when active, it requires an Armor login and uses the session's HTTPS hostname.
- The proxy sends a request envelope containing credential ciphertext and placeholders to the configured Armor host's `/api/proxy` endpoint.
- The 1Password custodian reads a configured dotenvx private-key reference through the local `op` CLI.
Evidence against
- The credential proxy handles credential-bearing requests, and the 1Password integration invokes an external CLI; both behaviors are tied to dotenvx credential-management features and explicit configuration.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
6 flaggedsrc/cli/help.jsView file
87patternName = private_key_openssh
severity = critical
line = 87
Critical
Critical Secret
Package contains a critical-looking secret pattern.
src/cli/help.jsView on unpkg · L8787patternName = private_key_openssh
severity = critical
line = 87
Critical
src/lib/helpers/ptyCommand.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
2 Critical2 High2 Medium6 Low
CriticalCritical Secretsrc/cli/help.js
CriticalSecret Patternsrc/cli/help.js
HighSemantic Analysis Limitedsrc/lib/helpers/ptyCommand.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltasrc/lib/custodians/local/onepassword.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencesrc/cli/actions/run.js
Affected versions and remediation
This report applies to @dotenvx/dotenvx@2.32.2.
See all versions of @dotenvx/dotenvx for other recorded verdicts.
- Review the evidence and your use of @dotenvx/dotenvx@2.32.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.