@lincyaw/workbench@0.2.0-rc.22
Presmium's workbench panels in React (the documents, a document edited on its rendered page with comments and version history) with the workspace service's client and the preview protocol's workbench side; @lincyaw/dsh places them in presmium studio (expe
AI Security Review
scanned 18h ago · by lpm-firewall-aiThe manifest exposes UI modules without install hooks, and the inspected network behavior serves the host-provided workspace. Operation reporting is host-gated and defaults to disabled if the host cannot be queried.
Decision evidence
public snapshot- The manifest exports browser UI modules and declares no lifecycle scripts or executable bin.
- Operation reporting goes to the host’s same-origin /api/presmium/telemetry endpoint.
- Reporting is disabled unless the host responds that collection is enabled; failures default to disabled.
- The Workbench starts this host-gated operation logger during construction.
Source & flagged code
5 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/places.ts#virtual:normalized:round1View on unpkgThe manifest exports browser UI modules and declares no lifecycle scripts or executable bin.
package.jsonView on unpkg · L25Findings
Affected versions and remediation
This report applies to @lincyaw/workbench@0.2.0-rc.22.
See all versions of @lincyaw/workbench for other recorded verdicts.
- Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.