LPM Firewall

Threat feed How it works Policy

Loading npm security reports…

LPM Firewall

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 9 finding(s) warrant review before installing.

View on npm All versions

registry / @forjacms/sections / 2.1.1

@forjacms/sections@2.1.1

Framework-agnostic Web Components for rendering Forja page sections. Zero CSS — bring your own styles via BEM class hooks.

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

CopyleftLicense

scanned 162 file(s), 1.59 MB of source, external domains: chat.stenciljs.com, evil.example, evilmartians.com, example.com, github.com, html.spec.whatwg.org, stenciljs.com, www.w3.org, www.w3ctech.com

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

1 High3 Medium5 Low

HighObfuscated

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

72%Warn

Verdict confidence

Firewall policyMatched warn-list

Package metadata

npm

AuthorDominik Dorfstetter

Maintainersdominikdorfstetter

Version2.1.3

PublishedJul 13, 2026

LicenseAGPL-3.0-or-later

Dependencies2

Integrityverified

Package size455 KB

Files225

Keywordsweb-componentsstencilsectionsheadlesscmsforjaaccessiblecustom-elements

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/index.cjs.jsmodule → dist/index.jstypes → dist/types/index.d.ts

LPM CLI

exports map

RuntimeNo engine / OS / CPU constraints

Artifact1.74 MB · 225 files1 signature(s) · provenance

Install lifecycleNo install hooks · other: build, dev, test, test:spec +2

Behavioral surface

ChildProcessEnvironmentVarsFilesystemNetworkHighEntropyStringsMinifiedObfuscatedUrlStringsCopyleftLicense

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

@forjacms/sections: Suspicious npm security report (Warn) | LPM Firewall