@hydranium/glsp-client-theia@1.0.0-next.334
Theia-coupled client primitives for GLSP heads built on @hydranium/glsp-server. Provides the diagram widget, manager, client contribution and connection-handler bases that Theia-based adopters extend, and binds @hydranium/glsp-client's host-neutral classe
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the CSS finding is ordinary loading-overlay styling. Inspected runtime entry points and session handling support the package’s stated Theia and GLSP integration purpose, with no concrete attack behavior identified.
Decision evidence
public snapshot- package.json defines build, cleanup, lint, and prepack scripts; no install lifecycle hook is present.
- The CSS finding styles a diagram loading overlay and its failure state.
- The root entry re-exports the browser entry, which exports diagram and client components.
- The connection handler forwards a Theia channel to a GLSP server using an adopter-supplied language identifier and port command.
- The browser client creates a connection, starts a GLSP client, and stops it when the connection is disposed.
- Window session data is stored in sessionStorage and reused only when a released-session marker matches.
Source & flagged code
8 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
style/diagram-loading.cssView on unpkgThe CSS finding styles a diagram loading overlay and its failure state.
style/diagram-loading.cssView on unpkg · L15Findings
Affected versions and remediation
This report applies to @hydranium/glsp-client-theia@1.0.0-next.334.
See all versions of @hydranium/glsp-client-theia for other recorded verdicts.
- Review the evidence and your use of @hydranium/glsp-client-theia@1.0.0-next.334 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.