@grantjs/server@1.22.1
Server SDK for Grant authorization - Middleware and guards for Express, Fastify, NestJS, and Next.js
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged NestJS bundle performs authorization checks through the SDK's configured API and only obtains request credentials as part of those checks. The manifest has no install hooks, and the environment-variable reference only controls debug logging; the scanner fingerprint did not correspond to malicious behavior in the inspected source.
Decision evidence
public snapshot- The manifest describes a server authorization SDK and exposes its framework integrations as library entry points.
- The client sends authorization checks to the configured API URL; it forwards a request token only when handling a supplied request.
- The environment variable only enables debug logging, and the manifest declares no install lifecycle hooks.
Source & flagged code
4 flaggedSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/nest.cjsView on unpkgThe manifest describes a server authorization SDK and exposes its framework integrations as library entry points.
package.jsonView on unpkg · L1Findings
Affected versions and remediation
This report applies to @grantjs/server@1.22.1.
See all versions of @grantjs/server for other recorded verdicts.
- Review the evidence and your use of @grantjs/server@1.22.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.