registry / @mastra/deployer / 1.77.0

@mastra/deployer@1.77.0

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the reviewed subprocess and configuration writes are scoped to deployment or caller-supplied validation. Static hints about shell use and network-capable build code do not establish malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A caller uses the package's deployment or analysis functionality.

Impact

These inspected behaviors do not establish unconsented changes to consumer install permissions, credential disclosure, or another attack effect.

Mechanism

The deploy helper copies selected workspace configuration into its supplied output directory; analyzer helpers launch a process to validate a supplied file.

AI rationale

Evidence

dist/services-DXqmEy8F.jsdist/analyze-Bs1m__f8.jsdist/analyze-Lrg01sNH.cjs

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json defines build, watch, API-spec, test, and lint scripts; it defines no preinstall, install, or postinstall hook.
The manifest declares @mastra/server as a dependency, not a runtime dependency on @mastra/deployer itself.
The deploy helper filters copied pnpm workspace settings through a fixed key set and validates build-approval entries.
The helper reads workspace configuration and writes a pnpm workspace file into the supplied deployment directory.
Package installation is launched by the deployment helper with that directory as its working root.
The analyzer's subprocess wrapper runs a supplied command and handles its result as a validation process.
The CommonJS analyzer's validate function constructs a Node process to import and validate a supplied file.

Evidence against

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

Source & flagged code

6 flagged

dist/services-DXqmEy8F.jsView file

Lines 1-43javascript

1import * as fs$1 from "fs";

2import fs from "fs";

3import fsPromises from "fs/promises";

4import path, { dirname } from "path";

5import { ErrorCategory, ErrorDomain, MastraError } from "@mastra/core/error";

6import fsExtra, { ensureFile, readJSON, writeJSON } from "fs-extra/esm";

7import { spawn } from "child_process";

8import { fileURLToPath } from "url";

High

Child Process

Package source references child process execution.

dist/services-DXqmEy8F.jsView on unpkg · L6

9import { MastraBase } from "@mastra/core/base";

10import { parse } from "yaml";

11import { Writable } from "stream";

12//#region src/deploy/log.ts

13const createPinoStream = (logger) => {

14 return new Writable({ write(chunk, _encoding, callback) {

15 const line = chunk.toString().trim();

16 if (line) {

17 console.info(line);

18 logger.info(line);

19 }

20 callback();

21 } });

22};

23/**

24* Args are joined into a shell command (`shell: true` is required for package

25* manager shims on Windows), so only allow characters that appear in package

High

Shell

Package source references shell execution.

dist/services-DXqmEy8F.jsView on unpkg · L23

26* specifiers and CLI flags — never shell metacharacters (CodeQL

27* js/shell-command-constructed-from-input).

28*/

29const SAFE_SHELL_ARG = /^[\w@%+=:,./^~-]*$/;

30function createChildProcessLogger({ logger, root }) {

31 const pinoStream = createPinoStream(logger);

32 return async ({ cmd, args, env }) => {

33 try {

34 for (const arg of args) if (!SAFE_SHELL_ARG.test(arg)) throw new Error(`Refusing to pass unsafe argument to shell command: ${JSON.stringify(arg)}`);

35 const subprocess = spawn(cmd, args, {

36 cwd: root,

37 shell: true,

38 env,

39 stdio: [

40 "ignore",

41 "pipe",

42 "pipe"

43 ]

dist/bundler-DWN_3kQY.cjsView file

Lines 1-21javascript

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");

2const require_utils = require("./utils-Bsr_sEcH.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundler-DWN_3kQY.cjsView on unpkg · L1

dist/analyze-Bs1m__f8.jsView file

Lines 1-33javascript

1import { a as getPackageName, c as isBuiltinModule, f as rollupSafeName, i as getNodeResolveOptions, l as isDependencyPartOfPackage, m as slash, r as getCompiledDepCachePath, s as isBareModuleSpecifier, u as isExternalProtocolImport } from "./utils-Bl3Lm7SI.js";

2import { i

dist/analyze-Lrg01sNH.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/deployer@1.66.0 matchedIdentity = npm:QG1hc3RyYS9kZXBsb3llcg:1.66.0 similarity = 0.603 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/analyze-Lrg01sNH.cjsView on unpkg

package.jsonView file

Lines 139-167json

139 "@mastra/core": "1.77.0",

140 "@mastra/mcp": "^2.4.0",

141 "@mastra/hono": "1.7.19",

142 "@mastra/server": "1.77.0"

143 },

144

Source & flagged code

6 flagged · loading source

dist/services-DXqmEy8F.jsView file

6import fsExtra, { ensureFile, readJSON, writeJSON } from "fs-extra/esm"; L7: import { spawn } from "child_process"; L8: import { fileURLToPath } from "url";

High

Child Process

Package source references child process execution.

dist/services-DXqmEy8F.jsView on unpkg · L6

23/** L24: * Args are joined into a shell command (`shell: true` is required for package L25: * manager shims on Windows), so only allow characters that appear in package

High

Shell

Package source references shell execution.

dist/services-DXqmEy8F.jsView on unpkg · L23

dist/bundler-DWN_3kQY.cjsView file

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs"); L2: const require_utils = require("./utils-Bsr_sEcH.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

Findings

1 Critical3 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/analyze-Lrg01sNH.cjs

HighChild Processdist/services-DXqmEy8F.js

HighShelldist/services-DXqmEy8F.js

HighCross File Remote Execution Contextdist/analyze-Bs1m__f8.js

MediumDynamic Requiredist/bundler-DWN_3kQY.cjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @mastra/deployer@1.77.0.

See all versions of @mastra/deployer for other recorded verdicts.

Review the evidence and your use of @mastra/deployer@1.77.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 06:37:52.484Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code