@hydranium/glsp-client-theia@1.0.0-next.370
Theia-coupled client primitives for GLSP heads built on @hydranium/glsp-server. Provides the diagram widget, manager, client contribution and connection-handler bases that Theia-based adopters extend, and binds @hydranium/glsp-client's host-neutral classe
AI Security Review
scanned 8d ago · by lpm-firewall-aiSource inspection found no install hook, credential collection, unrelated network destination, or concealed execution behavior. The runtime connection and session storage support the package’s Theia/GLSP integration.
Decision evidence
public snapshot- package.json defines no install lifecycle hook; its scripts are build, cleanup, lint, prepack, test, typecheck, and watch tasks.
- package.json points to the browser entrypoint and exposes browser and node subpaths.
- The root module re-exports the browser entrypoint.
- The client contribution creates its application connection and GLSP client through the host connection flow.
- The window session service stores and resumes session identifiers in tab-scoped session storage.
- The required CSS file contains diagram loading overlay styling.
Source & flagged code
7 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
style/diagram-loading.cssView on unpkgThe required CSS file contains diagram loading overlay styling.
style/diagram-loading.cssView on unpkg · L15Findings
Affected versions and remediation
This report applies to @hydranium/glsp-client-theia@1.0.0-next.370.
See all versions of @hydranium/glsp-client-theia for other recorded verdicts.
- Review the evidence and your use of @hydranium/glsp-client-theia@1.0.0-next.370 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.