registry / @melaya/runner / 1.1.66
@melaya/runner@1.1.66
Run Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe lifecycle entry is a prepublish build, and the runtime findings resolve to provider model discovery and runner setup behavior. Credential transfers inspected use provider endpoints or the selected runner server; no concrete attack behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI startup and periodic model refresh activate provider checks; browser and setup flows run when requested by the runner.
Impact
No unrelated credential recipient, unconsented install-time mutation, or other confirmed attack behavior was identified.
Mechanism
The package reads local provider login state, checks model availability, and reports limited startup failure metadata to the selected or default Melaya server.
AI rationale
The lifecycle entry is a prepublish build, and the runtime findings resolve to provider model discovery and runner setup behavior. Credential transfers inspected use provider endpoints or the selected runner server; no concrete attack behavior was found.
Network endpoints4
api.anthropic.com/v1/models?limit=100api.github.com/copilot_internal/v2/tokenapi.githubcopilot.com/modelsapi.melaya.org
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines prepublishOnly as a build command; it has no install lifecycle hook.
- CLI model detection and periodic refresh read saved provider login state. The Claude token goes to Anthropic’s model endpoint, and the GitHub token exchange goes to GitHub’s Copilot endpoint.
- Fatal-startup reporting is limited to failure-stage metadata, uses the supplied server or the Melaya default, and can be disabled with MELAYA_RUNNER_NO_TELEMETRY.
- The connection code sets assistant-host approval flags from per-turn connector data.
- Inspected dependency snapshots identify chalk and ora as terminal libraries and commander as a command-line parser.
- The reviewed setup and browser paths implement runner workflows; browser downloads require explicit authorization, URL checks restrict browser actions, and Luma forwarding limits hosts to Luma domains.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalVault.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.66.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.66 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.