@lincyaw/workbench@0.2.0-rc.1
Presmium's workbench panels in React (the documents, a document edited on its rendered page with comments and version history) with the workspace service's client and the preview protocol's workbench side; @lincyaw/dsh places them in presmium studio (expe
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe inspected entry points and runtime paths match a React workbench client, with no install hook or unrelated collector found. Telemetry is sent to the configured workspace host only after that host reports collection enabled.
Decision evidence
public snapshot- The package exports React and TypeScript source entry points and declares no lifecycle scripts.
- Workbench operations are sent to its host’s telemetry endpoint; the source says they wait until the host enables collection.
- The workspace client uses a configurable base URL, defaulting to the host-relative `api/presmium/` path.
- The workbench starts telemetry automatically when constructed.
- Telemetry can include UI control labels and operational context, so its contents may extend beyond anonymous usage counts.
Source & flagged code
6 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/places.ts#virtual:normalized:round1View on unpkgThe package exports React and TypeScript source entry points and declares no lifecycle scripts.
package.jsonView on unpkg · L25Findings
Affected versions and remediation
This report applies to @lincyaw/workbench@0.2.0-rc.1.
See all versions of @lincyaw/workbench for other recorded verdicts.
- Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.