@lincyaw/workbench@0.2.0-rc.19
Presmium's workbench panels in React (the documents, a document edited on its rendered page with comments and version history) with the workspace service's client and the preview protocol's workbench side; @lincyaw/dsh places them in presmium studio (expe
AI Security Review
scanned 20h ago · by lpm-firewall-aiThe source implements a React workbench and host-controlled operation telemetry. The telemetry gate defaults to disabled if the host check fails, and the package shows no install-time behavior or unrelated collector.
Decision evidence
public snapshot- The package exports TypeScript source and declares no lifecycle scripts.
- The operation logger checks with the host before collecting or sending telemetry and stops when collection is disabled or the check fails.
- Telemetry is sent to the host's same-origin `api/presmium/telemetry` endpoint; no unrelated collector is identified.
- When enabled by the host, telemetry includes workbench operations and clicks, including document and control labels.
Source & flagged code
6 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/places.ts#virtual:normalized:round1View on unpkgThe package exports TypeScript source and declares no lifecycle scripts.
package.jsonView on unpkg · L25Findings
Affected versions and remediation
This report applies to @lincyaw/workbench@0.2.0-rc.19.
See all versions of @lincyaw/workbench for other recorded verdicts.
- Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.19 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.