registry / @melaya/runner / 1.1.68
@melaya/runner@1.1.68
Run Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe flagged execution and network behavior resolves to runner provisioning, provider-specific model discovery, and requested browser sign-in. The reviewed lifecycle and runtime paths establish no concrete attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user starts the CLI with a runner token; model discovery runs at startup and refreshes during a connection. Browser sign-in begins on a session request.
Impact
No unintended credential exposure, unauthorized account change, or persistence was established.
Mechanism
Provider credentials are used for provider model APIs, while model names are sent to the authenticated runner service. Browser state is stored locally, and the Luma bridge is loopback-bound and host-restricted.
AI rationale
The flagged execution and network behavior resolves to runner provisioning, provider-specific model discovery, and requested browser sign-in. The reviewed lifecycle and runtime paths establish no concrete attack behavior.
Network endpoints4
api.anthropic.com/v1/models?limit=100api.github.com/copilot_internal/v2/tokenapi.githubcopilot.com/modelsapi.melaya.org/api/v1/runner/install-report
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest lists only a build-only prepublishOnly lifecycle script. The inspected dependencies are CLI formatting and parsing libraries, and the main entry only exports functions.
- Credential-based model discovery reads local provider credentials and uses provider APIs; it returns model names rather than forwarding those credentials to Melaya.
- The CLI starts model discovery, the connection refreshes it, and the runner sends the model list over its authenticated Melaya socket.
- Failure reporting sends a stage and bounded runtime details with the runner token to the configured server or the Melaya API fallback.
- Browser sign-in is session-requested, stores browser state locally, and the Luma bridge binds to loopback and restricts hosts.
- Python and browser setup follow runner provisioning or sign-in flows; Chromium downloads require an explicit authorization flag or occur during Luma sign-in.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalVault.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.68.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.68 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.