registry / @melaya/runner / 1.1.52
@melaya/runner@1.1.52
⚠ Under reviewRun Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe inspected package code does not establish malicious behavior, and its credential use is directed to the corresponding service APIs. Source for selected runtime dependencies Socket.IO client and Playwright is unavailable in the snapshot, so a clean verdict cannot be established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI activates its Socket.IO connection and may use Playwright for browser control.
Impact
The missing dependency source prevents a complete assessment of runtime behavior.
Mechanism
The runner uses Socket.IO and Playwright, but their dependency source was not available for inspection; inspected package code verifies pipeline signatures and applies browser destination checks.
AI rationale
The inspected package code does not establish malicious behavior, and its credential use is directed to the corresponding service APIs. Source for selected runtime dependencies Socket.IO client and Playwright is unavailable in the snapshot, so a clean verdict cannot be established.
Evidence
package.jsondist/connection.jsdist/browserAuthz.jsdist/cli.jsdist/detect.js
Decision evidence
public snapshotAI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest has a build-only prepublish hook and declares Playwright and Socket.IO client as runtime dependencies.
- The CLI requires a runner token and connects to the configured Melaya server.
- Claude and Copilot credentials are read for model discovery; the inspected requests send them to Anthropic and GitHub APIs.
- Pipeline code received by the runner is checked with a signature verifier before execution.
- The browser authorization code denies cloud metadata endpoints and private IP addresses.
- The available snapshot does not include source for the selected Playwright and Socket.IO client dependencies.
Evidence against
- The inspected sources show product-aligned local model discovery and authenticated runner behavior; they do not establish credential theft or an install-time attack.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalDbProbe.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.52.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.52 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.