@hydranium/glsp-client-theia@1.0.0-next.421
Theia-coupled client primitives for GLSP heads built on @hydranium/glsp-server. Provides the diagram widget, manager, client contribution and connection-handler bases that Theia-based adopters extend, and binds @hydranium/glsp-client's host-neutral classe
AI Security Review
scanned 11h ago · by lpm-firewall-aiThe package declares no install lifecycle hook, and its flagged contribution performs GLSP client and Theia channel operations consistent with its stated purpose. The source inspected shows no unrelated endpoint, credential collection, or other attack behavior.
Decision evidence
public snapshot- The package entry points expose browser and node framework modules for GLSP and Theia.
- The declared scripts are build, clean, lint, prepack, test, typecheck, and watch; no install lifecycle hook is declared.
- The flagged client contribution creates a GLSP connection and starts a client over it, consistent with the package's stated purpose.
- The client contribution listens for a Theia channel and closes it when no start is waiting.
Source & flagged code
6 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
style/diagram-loading.cssView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
lib/browser/client-contribution.jsView on unpkgFindings
Affected versions and remediation
This report applies to @hydranium/glsp-client-theia@1.0.0-next.421.
See all versions of @hydranium/glsp-client-theia for other recorded verdicts.
- Review the evidence and your use of @hydranium/glsp-client-theia@1.0.0-next.421 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.