@grantjs/server@1.18.6
Server SDK for Grant authorization - Middleware and guards for Express, Fastify, NestJS, and Next.js
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the inspected runtime forwards incoming request credentials to the caller-configured Grant API for authorization. The inspected schema dependency contains ordinary source exports and development scripts; no concrete attack behavior was found.
Decision evidence
public snapshot- The package manifest declares its schema dependency and lists build, check, lint, and test scripts; it has no install lifecycle hook.
- The inspected schema dependency has ordinary source and development scripts, and its entrypoint re-exports schema, event, and type modules.
- The runtime entrypoint exports GrantClient and token extraction helpers.
- The client uses the configured API URL and forwards a token or cookie from the supplied request with its API request.
- The Express middleware checks the configured resource and action and denies requests when authorization fails.
Source & flagged code
8 flaggedThe package manifest declares its schema dependency and lists build, check, lint, and test scripts; it has no install lifecycle hook.
package.jsonView on unpkg · L74The package manifest declares its schema dependency and lists build, check, lint, and test scripts; it has no install lifecycle hook.
package.jsonView on unpkg · L100Findings
Affected versions and remediation
This report applies to @grantjs/server@1.18.6.
See all versions of @grantjs/server for other recorded verdicts.
- Review the evidence and your use of @grantjs/server@1.18.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.