@ever-gauzy/plugin-integration-plane-api@0.1.11
Ever Gauzy Plane Integration - A Proxy connecting Plane frontend to Ever Gauzy APIs
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the package entrypoint exposes proxy and session-token APIs. The inspected runtime paths support ordinary Plane and Gauzy operations, with no confirmed unrelated credential transfer or unauthorized account action.
Decision evidence
public snapshot- package.json points to dist/index.js and lists no install lifecycle hook; the entrypoint exports proxy and session-token APIs.
- Reviewed runtime controllers, services, DTOs, serializers, and configuration paths implement Plane and Gauzy workspace operations and data handling.
- The API client sends requests to the configured Gauzy API base; upload forwarding uses its Gauzy image endpoint, and SSO handling verifies the supplied token.
Source & flagged code
7 flaggedpackage.json points to dist/index.js and lists no install lifecycle hook; the entrypoint exports proxy and session-token APIs.
package.jsonView on unpkg · L14package.json points to dist/index.js and lists no install lifecycle hook; the entrypoint exports proxy and session-token APIs.
package.jsonView on unpkg · L28Findings
Affected versions and remediation
This report applies to @ever-gauzy/plugin-integration-plane-api@0.1.11.
See all versions of @ever-gauzy/plugin-integration-plane-api for other recorded verdicts.
- Review the evidence and your use of @ever-gauzy/plugin-integration-plane-api@0.1.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.