registry / @dotenvx/dotenvx / 2.32.3
@dotenvx/dotenvx@2.32.3
a secure dotenv–from the creator of `dotenv`
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the flagged 1Password and proxy code serves credential-management features. The proxy requires configured encrypted credentials and Armor authentication, then forwards matching requests to the configured Armor host; no unrelated exfiltration or automatic attack behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The proxy runs only during an explicit `dotenvx run` when configured encrypted credentials match declared proxy rules; 1Password operations occur through the credential-management feature.
Impact
The reviewed flows support the package’s dotenv and credential-management features; no unrelated collection or automatic secret disclosure was identified.
Mechanism
The proxy forwards matching requests and encrypted credential metadata to the configured HTTPS Armor host. 1Password uses the local `op` CLI and signed-in account to store or retrieve keys.
AI rationale
The package has no install lifecycle hook, and the flagged 1Password and proxy code serves credential-management features. The proxy requires configured encrypted credentials and Armor authentication, then forwards matching requests to the configured Armor host; no unrelated exfiltration or automatic attack behavior was found.
Evidence
temporary dxp-* proxy directory under the operating-system temp directory
Network endpoints2
${config.hostname}/api/proxydotenvx.sh (explicit update command)
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install, preinstall, or postinstall hook; its declared scripts are development and release tasks.
- The 1Password integration checks local CLI/account availability and stores private keys through the signed-in 1Password account as concealed fields.
- The credential proxy only substitutes encrypted environment values explicitly declared in proxy rules and requires Armor authentication.
- Proxy requests go to the configured HTTPS Armor host at `/api/proxy`, carrying the request and matching encrypted credentials for that feature.
Evidence against
- The proxy forwards the user command’s request body and eligible headers to Armor, so it handles service data; the source restricts this to configured proxy credentials and the Armor service.
- The package provides an `update` command that runs a shell installer, but that behavior is tied to an explicit command, not installation or import.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flaggedsrc/cli/help.jsView file
87patternName = private_key_openssh
severity = critical
line = 87
Critical
Critical Secret
Package contains a critical-looking secret pattern.
src/cli/help.jsView on unpkg · L8787patternName = private_key_openssh
severity = critical
line = 87
Critical
src/lib/helpers/ptyCommand.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
2 Critical2 High2 Medium6 Low
CriticalCritical Secretsrc/cli/help.js
CriticalSecret Patternsrc/cli/help.js
HighSemantic Analysis Limitedsrc/lib/helpers/ptyCommand.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltasrc/lib/custodians/local/onepassword.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencesrc/lib/custodians/local/onepassword.js
Affected versions and remediation
This report applies to @dotenvx/dotenvx@2.32.3.
See all versions of @dotenvx/dotenvx for other recorded verdicts.
- Review the evidence and your use of @dotenvx/dotenvx@2.32.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.