@knapsack/app
Build Design Systems with Knapsack
This report shows the evidence for @knapsack/app@4.109.0. 0 of 49 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s runtime error reporting is disclosed and can be disabled, but it forwards detailed error objects and request data, which may include identifying project context. This is a telemetry risk rather than evidence of credential theft or a malicious install action.
Decision evidence
public snapshot- The CLI logger enables Datadog reporting by default outside the monorepo and provides a telemetry opt-out.
- Error reports include the error message, Error object, and extra metadata.
- A server error handler reports request query data and the request URL to Datadog.
- The CLI displays that telemetry is on and explains how to disable it.
- The package has no install lifecycle scripts; its npm scripts are build, clean, lint, and test.
Source & flagged code
5 flaggedPackage source references dynamic require/import behavior.
dist/types/knapsack-config.jsView on unpkg · L3The CLI logger enables Datadog reporting by default outside the monorepo and provides a telemetry opt-out.
dist/cli/log.jsView on unpkg · L28Findings
Affected versions and remediation
This report applies to @knapsack/app@4.109.0.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @knapsack/app@4.109.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.