registry / @mastra/deployer / 1.71.0

@mastra/deployer@1.71.0

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the flagged process execution is tied to build and validation behavior. The shell guard and filtered workspace configuration provide no evidence of an unconsented policy change or other attack.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user invokes the package's build or validation workflow.

Impact

The inspected behavior supports the requested build workflow; no concrete harmful effect was established.

Mechanism

The analyzer runs a selected file under Node for validation; the service runs package-manager commands after checking their arguments.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json lists build and test scripts but no install lifecycle hook.
The analyzer starts Node to validate a file selected by the build workflow.
The service rejects shell arguments outside a restricted character set before spawning a package-manager command.
Workspace configuration copying filters settings through an explicit allowlist.
The CommonJS analyzer runs validation on the selected file through Node.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 51 file(s), 1.16 MB of source, external domains: agentskills.io, cdn.jsdelivr.net, cdnjs.cloudflare.com, json-schema.org, mastra.ai, output.signals.mastra.ai

Source & flagged code

6 flagged

dist/analyze-Bt2ReBPd.jsView file

Lines 1-33javascript

1import { a as getPackageName, c as isBuiltinModule, f as rollupSafeName, i as getNodeResolveOptions, l as isDependencyPartOfPackage, m as slash, r as getCompiledDepCachePath, s as isBareModuleSpecifier, u as isExternalProtocolImport } from "./utils-Bl3Lm7SI.js";

2import { i as DepsService } from "./services-D_C2Onjo.js";

3import { a as mastraToolsAliasPlugin, c as removeDeployer, d as getPackageInfo$1, f as getPackageMetadata, h as esbuild, i as mastraInternalAliasPlugin, l as protocolExternalResolver, m as esmShim, o as tsConfigPaths, p as getPackageRootPath, s as subpathExternalsResolver } from "./bundler-x6FFX2HA.js";

4import { existsSync } from "fs";

5import { readFile, writeFile } from "fs/promises";

6import * as path$1 from "path";

7import { basename, dirname, isAbsolute, join, relative } from "path";

8import { ErrorCategory, ErrorDomain, MastraBaseError, MastraError } from "@mastra/core/error";

9import virtual from "@rollup/plugin-virtual";

10import * as pkg from "empathic/package";

11import { transformAsync, transformSync, types } from "@babel/core";

12import { createWorkspacesCache, findWorkspaces, findWorkspacesRoot } from "find-workspaces";

13import { ensureDir } from "fs-extra";

14import { spawn } from "child_process";

15import { fileURLToPath, pathToFileURL } from "url";

High

Child Process

Package source references child process execution.

dist/analyze-Bt2ReBPd.jsView on unpkg · L13

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/analyze-Bt2ReBPd.jsView on unpkg · L13

16import commonjs from "@rollup/plugin-commonjs";

17import json from "@rollup/plugin-json";

18import { getPackageInfo, resolveModule } from "local-pkg";

19import { rollup } from "rollup";

20import { optimizeLodashImports } from "@optimize-lodash/rollup-plugin";

21import nodeResolve from "@rollup/plugin-node-resolve";

22import * as resolve$1 from "resolve.exports";

23import { basename as basename$1 } from "path/posix";

24//#region \0rolldown/runtime.js

25var __create = Object.create;

26var __defProp = Object.defineProperty;

27var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

28var __getOwnPropNames = Object.getOwnPropertyNames;

29var __getProtoOf = Object.getPrototypeOf;

30var __hasOwnProp = Object.prototype.hasOwnProperty;

31var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);

32var __copyProps = (to, from, except, desc) => {

33 if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i <

dist/services-m8tlZVRv.cjsView file

Lines 7-47javascript

7path = require_rolldown_runtime.__toESM(path, 1);

8let _mastra_core_error = require("@mastra/core/error");

9let fs_extra_esm = require("fs-extra/esm");

10fs_extra_esm

dist/bundler-DGkVfnZZ.cjsView file

Lines 1-21javascript

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");

2const require_utils = require("./utils-Bsr_sEcH.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundler-DGkVfnZZ.cjsView on unpkg · L1

dist/analyze-C63iKGdc.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/deployer@1.66.0 matchedIdentity = npm:QG1hc3RyYS9kZXBsb3llcg:1.66.0 similarity = 0.603 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/analyze-C63iKGdc.cjsView on unpkg

package.jsonView file

Lines 138-166json

138 "@internal/types-builder": "0.0.112",

139 "@mastra/core": "1.71.0",

140 "@mastra/server": "1.71.0",

141 "@mastra/hono": "1.7.13"

142 },

143

Source & flagged code

6 flagged · loading source

dist/analyze-Bt2ReBPd.jsView file

13import { ensureDir } from "fs-extra"; L14: import { spawn } from "child_process"; L15: import { fileURLToPath, pathToFileURL } from "url";

High

Child Process

Package source references child process execution.

dist/analyze-Bt2ReBPd.jsView on unpkg · L13

13Cross-file remote execution chain: dist/analyze-Bt2ReBPd.js spawns dist/server/index.js; helper contains network access plus dynamic code execution. L13: import { ensureDir } from "fs-extra"; L14: import { spawn } from "child_process"; L15: import { fileURLToPath, pathToFileURL } from "url"; ... L52: * This parses the different stack traces and puts them into one format L53: * This borrows heavily from TraceKit (https://github.com/csnover/TraceKit) L54: */ ... L152: * L153: * @params dir - The directory to start searching from (default: `process.cwd()`) L154: * @params location - The location of the current package (usually the directory containing the package.json) L155: */ ... L255: * @param options - Spawn options L256: * @returns Promise that resolves with the exit code when the proces

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/analyze-Bt2ReBPd.jsView on unpkg · L13

dist/services-m8tlZVRv.cjs

Findings

1 Critical3 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/analyze-C63iKGdc.cjs

HighChild Processdist/analyze-Bt2ReBPd.js

HighShelldist/services-m8tlZVRv.cjs

HighCross File Remote Execution Contextdist/analyze-Bt2ReBPd.js

MediumDynamic Requiredist/bundler-DGkVfnZZ.cjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @mastra/deployer@1.71.0.

See all versions of @mastra/deployer for other recorded verdicts.

Review the evidence and your use of @mastra/deployer@1.71.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 06:34:13.313Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code