LPM Firewall

Threat feed How it works Policy

Loading npm security reports…

LPM Firewall

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 3 low-signal pattern(s) reviewed.

View on npm All versions

registry / @mastra/langfuse / 1.4.2

@mastra/langfuse@1.4.2

Langfuse observability provider for Mastra - uses official Langfuse v5 SDK

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 3 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVars

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 20.7 KB of source, external domains: cloud.langfuse.com

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 Medium2 Low

MediumEnvironment Vars

LowScripts Present

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

LowUrl Strings

65%Pass

Verdict confidence

Firewall policyNo policy match

Package metadata

npm

Maintainersabhiaiyer, smthomas, rase- +4

Version1.4.4

PublishedJun 26, 2026

LicenseApache-2.0

Dependencies7

Integrityverified

Package size73.3 KB

Files14

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/index.jstypes → dist/index.d.tsexports map

Runtimenode >=22.13.0

Artifact367 KB · 14 files1 signature(s) · provenance

Install lifecycleNo install hooks · other: build, build:watch, lint, test +1

Behavioral surface

EnvironmentVars

LPM CLI

UrlStrings

Manifest: clean

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

@mastra/langfuse@1.4.2: Clean npm security report (Allow) | LPM Firewall