registry / @netlify/serverless-functions-api / 2.22.0
@netlify/serverless-functions-api@2.22.0
The runtime API for Netlify Functions
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe flagged primitives are in bundled runtime and OpenTelemetry code, not a covert install or exfiltration chain. Source inspection found only a scoped prepare hook and expected function-loading and console telemetry behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing the runtime entry points during normal Netlify function execution.
Impact
No package-controlled exfiltration, persistence, destructive action, or install-time payload was found.
Mechanism
Serverless-function runtime support and local telemetry instrumentation.
AI rationale
The flagged primitives are in bundled runtime and OpenTelemetry code, not a covert install or exfiltration chain. Source inspection found only a scoped prepare hook and expected function-loading and console telemetry behavior.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes runtime and server entry points; its published manifest has no preinstall, install, or postinstall hook.
- The only prepare hook installs a scoped Husky configuration from a Netlify development dependency.
- The server entry dynamically imports the configured function path to run the user's serverless function.
- The telemetry entry emits trace data to standard output and starts instrumentation with request headers disabled.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
9 flaggeddist/index_server.jsView file
1import{createRequire}from"module";const require=createRequire(import.meta.url);
L2: var Oh=Object.create;var Hr=Object.defineProperty;var Fh=Object.getOwnPropertyDescriptor;var Ih=Object.getOwnPropertyNames;var jh=Object.getPrototypeOf,Nh=Object.prototype.hasOwnPr...
L3: \r
High
Child Process
Package source references child process execution.
dist/index_server.jsView on unpkg · L117`)),s=d.stream()[Symbol.asyncIterator]()}i=!0}}return new Rp.PonyfillReadableStream({start:()=>{r=e.entries()},pull:a=>n?s?s.next().then(({done:l,value:c})=>(l&&(s=void 0),c?a.enqu...
L18: `))),cancel:a=>{var l,c;(l=r==null?void 0:r.return)==null||l.call(r,a),(c=s==null?void 0:s.return)==null||c.call(s,a)}})}function gl(e,t,r){return Object.defineProperty(t,"name",{c...
L19: `)),i.enable(r.StreamResponse);let o;if(e._signal===null?o=void 0:e._signal&&(o=e._signal),i.setStreamProgressCallback(function(){return o!=null&&o.aborted?process.env.DEBUG?s.Cont...
L20: `;s+l.length>fy||(r.push(l),s+=l.length,i||o())}};var hy="__nfSystemLog",Rr=(e,t)=>{yu()||gu()(hy,{msg:e,fields:t})};var dy=e=>{if(typeof e!="object"||e===null)return"expected an o...
L21: Connection: close\r
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index_server.jsView on unpkg · L17Findings
7 High4 Medium6 Low
HighChild Processdist/index_server.js
HighSame File Env Network Executiondist/index_server.js
HighCommand Output Exfiltrationdist/telemetry/instrumentation.js
HighObfuscated Payload Loaderdist/telemetry/instrumentation.js
HighCross File Remote Execution Contextdist/telemetry/instrumentation.js
HighTrigger Reachable Command Output Exfiltrationdist/telemetry/instrumentation.js
HighSemantic Analysis Limitedpackage.json
MediumDynamic Requiredist/index_server.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Low
Affected versions and remediation
This report applies to @netlify/serverless-functions-api@2.22.0.
See all versions of @netlify/serverless-functions-api for other recorded verdicts.
- Review the evidence and your use of @netlify/serverless-functions-api@2.22.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.