@mastra/deployer-sandbox
Deploy a Mastra server into any workspace sandbox that supports networking and get a live public URL
This report shows the evidence for @mastra/deployer-sandbox@0.3.26. 0 of 27 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 23h ago · by lpm-firewall-aiThe package’s deployer behavior matches its stated purpose, and the flagged credential paths do not show credentials sent to an unrelated host. The bundled Studio does automatically enable PostHog autocapture without a clear disclosure in the reviewed source, so this is suspicious runtime telemetry rather than a demonstrated exfiltration attack.
Decision evidence
public snapshot- The bundled Studio initializes PostHog at https://us.posthog.com when it loads, unless browser constraints or MASTRA_TELEMETRY_DISABLED prevent it.
- The bundled PostHog SDK config has autocapture enabled by default.
- The Studio provides MASTRA_TELEMETRY_DISABLED as an opt-out, but the reviewed source does not disclose what telemetry is collected when enabled.
- The manifest describes a sandbox deployer and exports its runtime entry points from dist/.
- The deployer sends an optional Vercel token to api.vercel.com for the explicitly configured Edge Config alias update.
- Deployment environment variables are sent to the selected remote sandbox, with a warning that sandbox users can read them.
- The review found no evidence that credentials or rich application records are sent to PostHog.
Source & flagged code
5 flaggedSource sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/studio/assets/main-C4wZvSZw.jsView on unpkgPackage contains source files above the normal full-analysis size ceiling.
dist/studio/assets/main-C4wZvSZw.jsView on unpkgFindings
Affected versions and remediation
This report applies to @mastra/deployer-sandbox@0.3.26.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @mastra/deployer-sandbox@0.3.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.