registry / @mastra/deployer-sandbox / 0.3.23
@mastra/deployer-sandbox@0.3.23
Deploy a Mastra server into any workspace sandbox that supports networking and get a live public URL
AI Security Review
scanned 15d ago · by lpm-firewall-aiSource inspection found no install hook or confirmed attack behavior. Runtime file, command, and network operations support the package's sandbox deployment function and are invoked through its deployment API or optional alias configuration.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A consumer invokes the deployer to deploy an application.
Impact
Deployment and configured sandbox environment-variable access; no unrelated credential transfer or other attack behavior was identified.
Mechanism
The package transfers the build output and configured environment variables to the sandbox. Optional Edge Config alias updates use a caller-provided Vercel token.
AI rationale
Source inspection found no install hook or confirmed attack behavior. Runtime file, command, and network operations support the package's sandbox deployment function and are invoked through its deployment API or optional alias configuration.
Evidence
dist/index.jsdist/index.cjsdist/shared-MNp_lXYR.jsdist/shared-DhnF9P1K.cjs
Network endpoints1
api.vercel.com/v1/edge-config/{edgeConfigId}/items
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no install lifecycle hook and declares fs-extra and @mastra/deployer as runtime dependencies.
- The inspected dependency manifests show no install lifecycle hooks; fs-extra's ESM entry exports file utilities, and @mastra/deployer's entry exposes deployer and build services.
- The package's deploy method passes loaded environment variables into the sandbox deployment and records deployment metadata.
- The shared runtime code runs commands inside the sandbox; its default deployment directory is under the sandbox home.
- The Vercel Edge Config request requires a caller-provided token and is performed only when alias configuration is present.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flaggeddist/studio/assets/main-CPed5rup.jsView file
•path = dist/studio/assets/main-CPed5rup.js
kind = oversized_source_file
sizeBytes = 6097540
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/studio/assets/main-CPed5rup.jsView on unpkgdist/index.cjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.cjs#virtual:normalized:round1View on unpkgdist/index.cjsView file
Findings
2 High4 Medium6 Low
HighSemantic Analysis Limiteddist/index.cjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/studio/assets/main-CPed5rup.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @mastra/deployer-sandbox@0.3.23.
See all versions of @mastra/deployer-sandbox for other recorded verdicts.
- Review the evidence and your use of @mastra/deployer-sandbox@0.3.23 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.