@nanonets/graft@0.13.0
Build a repo's context graph as a folder of linked markdown files: a local, regenerable cache that every query keeps in sync with your code.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis package has an explicit-user agent integration that persists global hooks and a bounded telemetry channel. Its postinstall hook only prints a setup message, so the evidence does not establish malicious install-time behavior.
Decision evidence
public snapshot- `graft init` can install global Codex hooks that run on session and edit events.
- Previously selected agent wiring is replayed during later session/MCP startup.
- Published builds send gated anonymous telemetry to Nanonets' PostHog endpoint.
- The install-time postinstall script only checks for an existing shim and prints an init instruction.
- Global hook writes require the user-invoked `graft init` path and are skipped when `.codex` is absent.
- Claude CLI transport disables tools, user settings, MCP configuration, and session persistence.
Source & flagged code
5 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
dist/claude/shim-template.jsView on unpkg · L22Findings
Affected versions and remediation
This report applies to @nanonets/graft@0.13.0.
See all versions of @nanonets/graft for other recorded verdicts.
- Review the evidence and your use of @nanonets/graft@0.13.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.