registry / @mastra/deployer / 1.68.0

@mastra/deployer@1.68.0

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the inspected process execution supports analyzer and package-manager workflows with shell argument validation. The scanner’s process and dynamic-loading signals do not establish malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A consumer imports and uses the package’s analysis or deployment functionality.

Impact

No unconsented installation behavior, credential transfer, or other concrete attack impact was established.

Mechanism

The analyzer runs a validation process, and the service wrapper checks shell arguments before running package-manager commands.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes library entrypoints and has no install lifecycle script.
The analyzer’s process helper runs a supplied command and handles its exit result as a validation operation.
The service process wrapper rejects unsafe shell arguments before spawning a child process.
The CommonJS analyzer imports child_process as part of its bundled build tooling.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 51 file(s), 1.15 MB of source, external domains: agentskills.io, cdn.jsdelivr.net, cdnjs.cloudflare.com, json-schema.org, mastra.ai, output.signals.mastra.ai

Source & flagged code

6 flagged

dist/analyze-DEk6PGTI.jsView file

Lines 1-33javascript

1import { a as getPackageName, c as isBuiltinModule, f as rollupSafeName, i as getNodeResolveOptions, l as isDependencyPartOfPackage, m as slash, r as getCompiledDepCachePath, s as isBareModuleSpecifier, u as isExternalProtocolImport } from "./utils-Bl3Lm7SI.js";

2import { i as DepsService } from "./services-Lm6PRS4D.js";

3import { a as mastraToolsAliasPlugin, c as removeDeployer, d as getPackageInfo$1, f as getPackageMetadata, h as esbuild, i as mastraInternalAliasPlugin, l as protocolExternalResolver, m as esmShim, o as tsConfigPaths, p as getPackageRootPath, s as subpathExternalsResolver } from "./bundler-CC0klr1q.js";

4import { existsSync } from "fs";

5import { readFile, writeFile } from "fs/promises";

6import * as path$1 from "path";

7import { basename, dirname, isAbsolute, join, relative } from "path";

8import { ErrorCategory, ErrorDomain, MastraBaseError, MastraError } from "@mastra/core/error";

9import virtual from "@rollup/plugin-virtual";

10import * as pkg from "empathic/package";

11import { transformAsync, transformSync, types } from "@babel/core";

12import { createWorkspacesCache, findWorkspaces, findWorkspacesRoot } from "find-workspaces";

13import { ensureDir } from "fs-extra";

14import { spawn } from "child_process";

15import { fileURLToPath, pathToFileURL } from "url";

High

Child Process

Package source references child process execution.

dist/analyze-DEk6PGTI.jsView on unpkg · L13

16import commonjs from "@rollup/plugin-commonjs";

17import json from "@rollup/plugin-json";

18import { getPackageInfo, resolveModule } from "local-pkg";

19import { rollup } from "rollup";

20import { optimizeLodashImports } from "@optimize-lodash/rollup-plugin";

21import nodeResolve from "@rollup/plugin-node-resolve";

22import * as resolve$1 from "resolve.exports";

23import { basename as basename$1 } from "path/posix";

24//#region \0rolldown/runtime.js

25var __create = Object.create;

26var __defProp = Object.defineProperty;

27var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

28var __getOwnPropNames = Object.getOwnPropertyNames;

29var __getProtoOf = Object.getPrototypeOf;

30var __hasOwnProp = Object.prototype.hasOwnProperty;

31var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);

32var __copyProps = (to, from, except, desc) => {

33 if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i <

dist/services-Lm6PRS4D.jsView file

Lines 3-43javascript

3import fsPromises from "fs/promises";

4import path, { dirname } from "path";

5import { ErrorCategory, ErrorDomain, MastraError } from "@mastra/core/error";

6import fsExtra, { ensureFile, readJSON, writeJSON } from "fs-extra/esm"

dist/bundler-CjoP35xh.cjsView file

Lines 1-21javascript

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");

2const require_utils = require("./utils-Bsr_sEcH.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundler-CjoP35xh.cjsView on unpkg · L1

dist/analyze-ClD1cvPT.cjsView file

Lines 1-36javascript

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");

2const require_utils = require("./utils-Bsr_sEcH.cjs");

3const require_services =

package.jsonView file

Lines 137-166json

137 "@mastra/agent-browser": "0.5.3",

138 "@mastra/hono": "1.7.10",

139 "@mastra/mcp": "^2.0.0",

140 "@mastra/server": "1.68.0",

141 "@mastra/core":

Source & flagged code

6 flagged · loading source

dist/analyze-DEk6PGTI.jsView file

13import { ensureDir } from "fs-extra"; L14: import { spawn } from "child_process"; L15: import { fileURLToPath, pathToFileURL } from "url";

High

Child Process

Package source references child process execution.

dist/analyze-DEk6PGTI.jsView on unpkg · L13

dist/services-Lm6PRS4D.jsView file

23/** L24: * Args are joined into a shell command (`shell: true` is required for package L25: * manager shims on Windows), so only allow characters that appear in package

High

Shell

Package source references shell execution.

dist/services-Lm6PRS4D.jsView on unpkg · L23

dist/bundler-CjoP35xh.cjsView file

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs"); L2: const require_utils = require("./utils-Bsr_sEcH.cjs");

Findings

1 Critical3 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/analyze-ClD1cvPT.cjs

HighChild Processdist/analyze-DEk6PGTI.js

HighShelldist/services-Lm6PRS4D.js

HighCross File Remote Execution Contextdist/analyze-ClD1cvPT.cjs

MediumDynamic Requiredist/bundler-CjoP35xh.cjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @mastra/deployer@1.68.0.

See all versions of @mastra/deployer for other recorded verdicts.

Review the evidence and your use of @mastra/deployer@1.68.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 06:34:54.299Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code