@hydranium/glsp-client-theia@1.0.0-next.375
Theia-coupled client primitives for GLSP heads built on @hydranium/glsp-server. Provides the diagram widget, manager, client contribution and connection-handler bases that Theia-based adopters extend, and binds @hydranium/glsp-client's host-neutral classe
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged contribution implements workspace-gated GLSP client startup, channel connection, and reconnection behavior consistent with the package's stated purpose. The package has no install lifecycle hook, and the CSS finding is ordinary loading UI.
Decision evidence
public snapshot- The contribution waits for a workspace to open before starting its GLSP client and reports the connection attempt.
- The client obtains a channel through Theia's GLSP contribution path and creates a channel connection.
- The package root re-exports its browser entry; its browser and Node entry points are separately exposed.
- The flagged CSS describes a diagram loading overlay and contains presentation rules.
- The package manifest has no preinstall, install, or postinstall lifecycle script.
- Searches of the package found no fetch calls, eval calls, child_process use, or hard-coded HTTPS endpoints in source.
Source & flagged code
6 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
style/diagram-loading.cssView on unpkgThe flagged CSS describes a diagram loading overlay and contains presentation rules.
style/diagram-loading.cssView on unpkg · L10Findings
Affected versions and remediation
This report applies to @hydranium/glsp-client-theia@1.0.0-next.375.
See all versions of @hydranium/glsp-client-theia for other recorded verdicts.
- Review the evidence and your use of @hydranium/glsp-client-theia@1.0.0-next.375 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.