@ever-gauzy/plugin-integration-plane-api@0.1.10
Ever Gauzy Plane Integration - A Proxy connecting Plane frontend to Ever Gauzy APIs
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the reviewed runtime source uses authentication for requests to the configured API service as part of the package's proxy function. Generic network and environment-variable references align with that behavior; no concrete attack behavior was found.
Decision evidence
public snapshot- The manifest exposes the built API and lists build, start, lint, and test scripts; it has no install lifecycle hook.
- The shared request service sends bearer-authenticated requests to the configured API base URL plus the route, while the configuration registry resolves that URL from request, package, or environment configuration.
- The required controllers, services, serializers, and DTO files support ordinary Plane and Gauzy proxy operations. The inspected source did not establish unrelated data collection, command execution, or another attack behavior.
Source & flagged code
7 flaggedThe manifest exposes the built API and lists build, start, lint, and test scripts; it has no install lifecycle hook.
package.jsonView on unpkg · L15The manifest exposes the built API and lists build, start, lint, and test scripts; it has no install lifecycle hook.
package.jsonView on unpkg · L26Findings
Affected versions and remediation
This report applies to @ever-gauzy/plugin-integration-plane-api@0.1.10.
See all versions of @ever-gauzy/plugin-integration-plane-api for other recorded verdicts.
- Review the evidence and your use of @ever-gauzy/plugin-integration-plane-api@0.1.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.