registry / @nx/enterprise-cloud / 5.0.10
@nx/enterprise-cloud@5.0.10
A Nx plugin which is specific to Nx Enterprise Cloud workspaces.
AI Security Review
scanned 27d ago · by lpm-firewall-aiStatic inspection found no install hooks or concrete malicious behavior. The only workspace mutation is an explicit Nx generator registering the package plugin.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing the Nx plugin or explicitly invoking its init generator.
Impact
No malicious execution, network activity, credential harvesting, or destructive behavior was identified.
Mechanism
The plugin reads project package metadata; the generator updates nx.json to register itself.
AI rationale
Static inspection found no install hooks or concrete malicious behavior. The only workspace mutation is an explicit Nx generator registering the package plugin.
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines a CommonJS plugin entry point and has no lifecycle scripts.
- The runtime plugin reads workspace package metadata and returns Nx project metadata.
- The explicit init generator adds this plugin to nx.json and formats files.
Evidence against
Behavioral surface
Filesystem
PossibleObfuscationTrivialUrlStrings
Source & flagged code
3 flagged · loading sourcepackage.jsonView file
2"name": "@nx/enterprise-cloud",
"version": "5.0.10",
"description": "A Nx plugin which is specific to Nx Enterprise Cloud workspaces.",
"type": "commonjs",
"main": "src/i
Low
Suspicious Lifecycle Evidence
The manifest defines a CommonJS plugin entry point and has no lifecycle scripts.
package.jsonView on unpkg · L2src/plugin/plugin.jsView file
1a']['root'])continue;let _0x351461=(0x0,e['joinPathFragments'])(_0x15c5bc['data']['root'],'package.json'),_0x5cbdd0=(0x0,r['existsSync'])(_0x351461)?(0x0,e['readJsonFile'])(_0x351461):null,_0x45c22d=_0x5cbdd0?.['name']||
Low
Ai Review Evidence
The runtime plugin reads workspace package metadata and returns Nx project metadata.
src/plugin/plugin.jsView on unpkg · L1src/generators/init/init.jsView file
Findings
5 Low
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencesrc/plugin/plugin.js
LowAi Review Evidencesrc/generators/init/init.js
Affected versions and remediation
This report applies to @nx/enterprise-cloud@5.0.10.
See all versions of @nx/enterprise-cloud for other recorded verdicts.
- Review the evidence and your use of @nx/enterprise-cloud@5.0.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.