@hydranium/glsp-client-theia@1.0.0-next.384
Theia-coupled client primitives for GLSP heads built on @hydranium/glsp-server. Provides the diagram widget, manager, client contribution and connection-handler bases that Theia-based adopters extend, and binds @hydranium/glsp-client's host-neutral classe
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package exposes Theia GLSP client entry points, and the flagged CSS and changed manager behavior match that purpose. The manifest has no install lifecycle hook, and narrow searches found no network, credential, environment-variable or process-execution behavior in the reviewed source.
Decision evidence
public snapshot- The manifest declares build, lint, test and prepack scripts; none is an install lifecycle hook.
- The prepack script checks that built entry files exist before packing.
- The widget imports the package's loading-overlay stylesheet.
- The flagged CSS defines a themed loading overlay and spinner.
- The diagram manager reconnects and reopens diagrams after client loss or startup.
Source & flagged code
6 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
style/diagram-loading.cssView on unpkgThe flagged CSS defines a themed loading overlay and spinner.
style/diagram-loading.cssView on unpkg · L15Findings
Affected versions and remediation
This report applies to @hydranium/glsp-client-theia@1.0.0-next.384.
See all versions of @hydranium/glsp-client-theia for other recorded verdicts.
- Review the evidence and your use of @hydranium/glsp-client-theia@1.0.0-next.384 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.