registry / @lensmcp/vite-plugin / 1.23.3

@lensmcp/vite-plugin@1.23.3

LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.

AI Security Review

scanned 27d ago · by lpm-firewall-ai

The inspected entrypoint and plugin code implement Vite instrumentation using same-scope bridge dependencies, with no install hook or concrete malicious behavior found. The observed event reporting is consistent with the plugin’s stated purpose.

Static reason

One or more suspicious static signals were detected.

Trigger

When the plugin is enabled during Vite serving and the injected browser client runs.

Impact

The inspected behavior supports the package’s instrumentation purpose; no concrete malicious behavior was established.

Mechanism

The client sends instrumentation events, including fetch metadata, over a WebSocket whose default host is loopback.

AI rationale

Evidence

package.jsonlib/plugin.js

Network endpoints2

ws://${e.host}:${e.port}127.0.0.1 (default host)

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest declares same-scope LensMCP bridge and instrumentation dependencies, with no lifecycle scripts.
The plugin activates for Vite serving by default, and the browser client connects to a configurable WebSocket host that defaults to loopback.
The client reports fetch metadata such as URL and status to that WebSocket for the plugin’s instrumentation function.

Evidence against

Behavioral surface

Source

EnvironmentVars

Supply chain

HighEntropyStringsMinified

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 32.5 KB of source

Source & flagged code

5 flagged

lib/plugin.jsView file

1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core L1: "use strict";var U=Object.defineProperty;var g=(e,n)=>U(e,"name",{value:n,configurable:!0});var V=Object.defineProperty,u=g((e,n)=>V(e,"name",{value:n,configurable:!0}),"d");import... L2: (() => {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

lib/plugin.jsView on unpkg · L1

1127.0.0.1",i=e.injectClient??!0;let f,h;const r=O(n),d=e.aliasValtio??!0,w=e.transformSource??!0,S=e.applyOnBuild??process.env.LENSMCP_VITE_APPLY_ON_BUILD==="1";return{name:"@lensm

Low

Ai Review Evidence

The plugin activates for Vite serving by default, and the browser client connects to a configurable WebSocket host that defaults to loopback.

lib/plugin.jsView on unpkg · L1

45ws://${e.host}:${e.port}'; let ws = null; let queue = []; let openOnce = false; // Per-TAB identity: sessionStorage is scoped to the tab (and surv

Low

Ai Review Evidence

The plugin activates for Vite serving by default, and the browser client connects to a configurable WebSocket host that defaults to loopback.

lib/plugin.jsView on unpkg · L45

276send({ kind: 'fetch', method, url, status: res.status, statusText: res.statusText, ok: res.ok, durationMs: Date.now() - start }); return res;

Low

Ai Review Evidence

The client reports fetch metadata such as URL and status to that WebSocket for the plugin’s instrumentation function.

lib/plugin.jsView on unpkg · L276

package.jsonView file

16"dependencies": { "@babel/core": "^7.0.0", "@lensmcp/bridge": "1.23.3", "@lensmcp/core": "1.23.3", "@lensmcp/protocol-types": "1.23.3", "@lensmcp/react-instrumentation"

Low

Suspicious Lifecycle Evidence

The manifest declares same-scope LensMCP bridge and instrumentation dependencies, with no lifecycle scripts.

package.jsonView on unpkg · L16

Findings

1 High2 Medium5 Low

HighCopied Package Dependency Bridgelib/plugin.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencelib/plugin.js

Affected versions and remediation

This report applies to @lensmcp/vite-plugin@1.23.3.

See all versions of @lensmcp/vite-plugin for other recorded verdicts.

Review the evidence and your use of @lensmcp/vite-plugin@1.23.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-09 10:45:39.193Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @lensmcp/vite-plugin / 1.23.3

@lensmcp/vite-plugin@1.23.3

LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.

AI Security Review

scanned 27d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

When the plugin is enabled during Vite serving and the injected browser client runs.

Impact

The inspected behavior supports the package’s instrumentation purpose; no concrete malicious behavior was established.

Mechanism

The client sends instrumentation events, including fetch metadata, over a WebSocket whose default host is loopback.

AI rationale

Evidence

package.jsonlib/plugin.js

Network endpoints2

ws://${e.host}:${e.port}127.0.0.1 (default host)

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest declares same-scope LensMCP bridge and instrumentation dependencies, with no lifecycle scripts.
The plugin activates for Vite serving by default, and the browser client connects to a configurable WebSocket host that defaults to loopback.
The client reports fetch metadata such as URL and status to that WebSocket for the plugin’s instrumentation function.

Evidence against

Behavioral surface

Source

EnvironmentVars

Supply chain

HighEntropyStringsMinified

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 32.5 KB of source

Source & flagged code

5 flagged

lib/plugin.jsView file

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

lib/plugin.jsView on unpkg · L1

1127.0.0.1",i=e.injectClient??!0;let f,h;const r=O(n),d=e.aliasValtio??!0,w=e.transformSource??!0,S=e.applyOnBuild??process.env.LENSMCP_VITE_APPLY_ON_BUILD==="1";return{name:"@lensm

Low

Ai Review Evidence

The plugin activates for Vite serving by default, and the browser client connects to a configurable WebSocket host that defaults to loopback.

lib/plugin.jsView on unpkg · L1

45ws://${e.host}:${e.port}'; let ws = null; let queue = []; let openOnce = false; // Per-TAB identity: sessionStorage is scoped to the tab (and surv

Low

Ai Review Evidence

The plugin activates for Vite serving by default, and the browser client connects to a configurable WebSocket host that defaults to loopback.

lib/plugin.jsView on unpkg · L45

276send({ kind: 'fetch', method, url, status: res.status, statusText: res.statusText, ok: res.ok, durationMs: Date.now() - start }); return res;

Low

Ai Review Evidence

The client reports fetch metadata such as URL and status to that WebSocket for the plugin’s instrumentation function.

lib/plugin.jsView on unpkg · L276

package.jsonView file

16"dependencies": { "@babel/core": "^7.0.0", "@lensmcp/bridge": "1.23.3", "@lensmcp/core": "1.23.3", "@lensmcp/protocol-types": "1.23.3", "@lensmcp/react-instrumentation"

Low

Suspicious Lifecycle Evidence

The manifest declares same-scope LensMCP bridge and instrumentation dependencies, with no lifecycle scripts.

package.jsonView on unpkg · L16

Findings

1 High2 Medium5 Low

HighCopied Package Dependency Bridgelib/plugin.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencelib/plugin.js

Affected versions and remediation

This report applies to @lensmcp/vite-plugin@1.23.3.

See all versions of @lensmcp/vite-plugin for other recorded verdicts.

Review the evidence and your use of @lensmcp/vite-plugin@1.23.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-09 10:45:39.193Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @lensmcp

Related packages

More from @lensmcp