registry / @mastra/deployer / 1.67.0

@mastra/deployer@1.67.0

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the flagged process execution belongs to bundling and validation workflows. The network proxy is development-only, restricted to loopback requests, and uses operator-configured platform credentials and endpoint settings.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A developer runs the server with both development mode and Studio enabled, then requests the learning route from a loopback host.

Impact

No confirmed attack surface was established; the inspected behavior is limited to a guarded development proxy and the package’s build and validation operations.

Mechanism

The proxy requires platform access credentials supplied through environment variables and forwards a GET request to the platform endpoint, which can also be selected through an environment variable.

AI rationale

Evidence

package.jsondist/analyze-hp4aHpms.cjsdist/analyze-B5HY26Tt.jsdist/bundler/index.jsdist/server/index.cjs

Network endpoints1

output.signals.mastra.ai

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json defines build, test, and lint scripts; it has no lifecycle install hook.
The analyzer’s subprocess is part of its Node validation workflow.
The ESM analyzer likewise starts a Node validation subprocess.
Dependency installation is called from the bundler’s explicit installDependencies method.
The server learning proxy rejects non-loopback hosts and cross-origin requests.
The proxy uses platform credentials provided through environment variables and an endpoint configurable through the environment.
The learning route is registered only when development mode and Studio are enabled.

Evidence against

The package includes child-process execution and a network proxy, but inspected source ties them to bundling, validation, and a development-only platform proxy.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

Source & flagged code

7 flagged

dist/analyze-hp4aHpms.cjsView file

Lines 1-24javascript

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");

2const require_utils = require("./utils-7WDNT3Ca.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/analyze-hp4aHpms.cjsView on unpkg · L1

3const require_services = require("./services-BLvNG7v7.cjs");

4const require_bundler = require("./bundler-BKf2S2r_.cjs");

5let child_process = require("child_process");

6let fs = require("fs");

High

Child Process

Package source references child process execution.

dist/analyze-hp4aHpms.cjsView on unpkg · L4

7let fs_promises = require("fs/promises");

8let path = require("path");

9path = require_rolldown_runtime.__toESM(path, 1);

10let _mastra_core_error = require("@mastra/core/error");

11let _rollup_plugin_virtual = require("@rollup/plugin-virtual");

12_rollup_plugin_virtual = require_rolldown_runtime.__toESM(_rollup_plugin_virtual, 1);

13let empathic_package = require("empathic/package");

14empathic_package = require_rolldown_runtime.__toESM(empathic_package, 1);

15let _babel_core = require("@babel/core");

16let _sindresorhus_slugify = require("@sindresorhus/slugify");

17_sindresorhus_slugify = require_rolldown_runtime.__toESM(_sindresorhus_slugify, 1);

18let find_workspaces = require("find-workspaces");

19let fs_extra = require("fs-extra");

20let url = require("url");

21let _rollup_plugin_commonjs = require("@rollup/plugin-commonjs");

22_rollup_plugin_commonjs = require_rolldown_runtime.__toESM(_rollup_plugin_commonjs, 1);

23let _rollup_plugin_json = require("@rollup/plugin-json");

24_rollup_plugin_json = require_rolldown_runtime.__toESM(_rollup_plugin_json, 1);

dist/analyze-B5HY26Tt.jsView file

Lines 1-23javascript

1import { a as getPackageName, c as isBuiltinModule, f as rollupSafeName, i as getNodeResolveOptions, l as isDependencyPartOfPackage, m as slash, r as getCompiledDepCachePath, s as isBareModuleSpecifier, u as isExternalProtocolImport } from "./utils-DYi43Kp4.js";

2import { i

dist/bundler/index.jsView file

Lines 245-285javascript

245 pnpmNodeLinker: this.pnpmNodeLinker

246 });

247 }

248 /**

249 * Generate a package-lock.json for the output directory so that deploy targets

250 * can use `npm ci` instead of `npm install`, skipping version resolution entirely.

251 * This is a lockfile-only operation — no packages are downloaded.

252 *

253 * Temporarily moves node_modules out of the way because pnpm's symlink-based

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

dist/server/index.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/deployer@1.66.0 matchedIdentity = npm:QG1hc3RyYS9kZXBsb3llcg:1.66.0 similarity = 0.883 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/index.cjsView on unpkg

Source & flagged code

7 flagged · loading source

dist/analyze-hp4aHpms.cjsView file

4const require_bundler = require("./bundler-BKf2S2r_.cjs"); L5: let child_process = require("child_process"); L6: let fs = require("fs");

High

Child Process

Package source references child process execution.

dist/analyze-hp4aHpms.cjsView on unpkg · L4

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs"); L2: const require_utils = require("./utils-7WDNT3Ca.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/analyze-hp4aHpms.cjsView on unpkg · L1

dist/analyze-B5HY26Tt.jsView file

342"#tools", L343: "execa", L344: "effect",

High

Shell

Package source references shell execution.

dist/analyze-B5HY26Tt.jsView on unpkg · L342

Findings

1 Critical5 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/server/index.cjs

HighChild Processdist/analyze-hp4aHpms.cjs

HighShelldist/analyze-B5HY26Tt.js

HighCross File Remote Execution Contextdist/analyze-B5HY26Tt.js

HighRuntime Package Installdist/bundler/index.js

HighSemantic Analysis Limitedpackage.json

MediumDynamic Requiredist/analyze-hp4aHpms.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @mastra/deployer@1.67.0.

See all versions of @mastra/deployer for other recorded verdicts.

Review the evidence and your use of @mastra/deployer@1.67.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 06:35:04.163Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code