registry / @opentf/web-docs / 0.6.0

@opentf/web-docs@0.6.0

Documentation-site generator for OTF Web — themed shell components (sidebar, TOC, callouts, tabs), a build-time nav generator, and a default light/dark theme.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package provides docs UI components and build-time generators for nav, posts, feeds, last-updated metadata, llms text, and Pagefind search indexes.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Importing components or running the host docs build/dev toolchain with @opentf/web-docs build integration.

Impact

Build reads project docs metadata/pages and may write dist/pagefind search files; no exfiltration or unconsented control-surface mutation identified.

Mechanism

docs-site generation with local filesystem reads, git metadata lookup, and same-origin Pagefind runtime loading

Rationale

Static inspection shows the scanner findings are explained by legitimate docs build behavior: dynamic imports load generated same-origin Pagefind assets or project-owned metadata, and git subprocesses compute last-updated timestamps. With no lifecycle hooks, exfiltration, persistence, destructive behavior, or AI-agent control-surface mutation, this should be marked clean.

Evidence

package.jsonindex.jscomponents/Search.jsxbuild/frontmatter.jsbuild/index.jsbuild/pagefind.jsbuild/docs-nav-plugin.jsbuild/blog-posts-plugin.jsbuild/last-updated-plugin.jsbuild/last-updated.jsbuild/feed.jsbuild/llms.jsapp/**/page.{mdx,md,jsx,tsx}app/**/_meta.{js,mjs,json}dist/pagefind

Network endpoints3

github.com/Open-Tech-Foundation/Web-App-Framework.gitgithub.com/Open-Tech-Foundation/Web-App-Framework#readmegithub.com/Open-Tech-Foundation/Web-App-Framework/issues

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

build/last-updated*.js invoke git via execFileSync at build/dev time.
build/docs-nav-plugin.js dynamically imports project _meta.js files during build.

Evidence against

package.json has no preinstall/install/postinstall hooks and no bin entry.
components/Search.jsx imports only /pagefind/pagefind.js from the built same-origin site on user search.
build/frontmatter.js contains only an optional BOM match, not bidi control obfuscation.
No credential/env harvesting, destructive file operations, persistence, or external exfiltration endpoints found.
Filesystem reads and Pagefind writes are package-aligned docs build behavior.

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 45 file(s), 92.7 KB of source, external domains: www.w3.org

Source & flagged code

3 flagged

components/Search.jsxView file

Lines 1-36jsx

1// Pagefind-backed search modal (Phase 2). The navbar's `SearchTrigger` and the global

2// ⌘K / Ctrl+K shortcut open it via `window.__otfwOpenSearch`, which this component

3// installs on mount. The static index is generated at build time (`otfw build --ssg`

4// with `docs.search.provider === "pagefind"`) and lives at `/pagefind/`; we load its

5// runtime on first open so pages without a search never pay for it.

6//

7// Note: results only exist against a built site (`dist/`). In dev there is no index,

8// so the modal opens but reports no results — expected.

9import { onMount, router, RawHtml, Portal } from "@opentf/web";

11let pagefindPromise = null;

12function loadPagefind() {

13 if (!pagefindPromise) {

14 // A non-literal specifier keeps the bundler from trying to resolve the index at

15 // build time (it doesn't exist yet) — it stays a runtime import of the static file.

16 const path = "/pagefind/pagefind.js";

17 pagefindPromise = import(/* @vite-ignore */ path).then(async (pf) => {

18 await pf.init?.();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

components/Search.jsxView on unpkg · L16

19 return pf;

20 });

21 }

22 return pagefindPromise;

23}

25export default function Search() {

26 let open = $state(false);

27 let query = $state("");

28 let results = $state([]);

29 let active = $state(0);

30 let loading = $state(false);

31 const inputRef = $ref();

33 let timer;

34 let token = 0;

36 async function runSearch(q) {

build/frontmatter.jsView file

Lines 1-38javascript

1// Minimal YAML frontmatter reader for the nav generator.

2//

3// Mirrors the flat-scalar parser in the Rust MDX front-end

4// (crates/otfw_compiler/src/mdx.rs `frontmatter_object`): a leading `---` block of

5// `key: value` lines, scalars only. Booleans/numbers are coerced; everything else is

6// a string. Nested maps / lists are out of scope (a follow-up, same as the Rust side).

8import { readFileSync } from "node:fs";

10/** Parse the leading frontmatter block of an .mdx/.md file into a flat object. */

Source & flagged code

3 flagged · loading source

components/Search.jsxView file

16const path = "/pagefind/pagefind.js"; L17: pagefindPromise = import(/* @vite-ignore */ path).then(async (pf) => { L18: await pf.init?.();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

components/Search.jsxView on unpkg · L16

build/frontmatter.jsView file

18contains invisible/control Unicode U+FEFF (zero width no-break space) const m = source.match(/^<U+FEFF>?---\r?\n([\s\S]*?)\r?\n---/);

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

build/frontmatter.jsView on unpkg · L18

•Trigger-reachable chain: manifest.exports -> build/index.js -> build/blog-posts-plugin.js -> build/frontmatter.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

build/frontmatter.jsView on unpkg

Findings

2 Critical2 Medium4 Low

CriticalTrojan Source Unicodebuild/frontmatter.js

CriticalTrigger Reachable Dangerous Capabilitybuild/frontmatter.js

MediumDynamic Requirecomponents/Search.jsx

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

components/Search.jsxView file

Lines 1-36jsx

1// Pagefind-backed search modal (Phase 2). The navbar's `SearchTrigger` and the global

2// ⌘K / Ctrl+K shortcut open it via `window.__otfwOpenSearch`, which this component

3// installs on mount. The static index is generated at build time (`otfw build --ssg`

4// with `docs.search.provider === "pagefind"`) and lives at `/pagefind/`; we load its

5// runtime on first open so pages without a search never pay for it.

6//

7// Note: results only exist against a built site (`dist/`). In dev there is no index,

8// so the modal opens but reports no results — expected.

9import { onMount, router, RawHtml, Portal } from "@opentf/web";

11let pagefindPromise = null;

12function loadPagefind() {

13 if (!pagefindPromise) {

14 // A non-literal specifier keeps the bundler from trying to resolve the index at

15 // build time (it doesn't exist yet) — it stays a runtime import of the static file.

16 const path = "/pagefind/pagefind.js";

17 pagefindPromise = import(/* @vite-ignore */ path).then(async (pf) => {

18 await pf.init?.();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

components/Search.jsxView on unpkg · L16

19 return pf;

20 });

21 }

22 return pagefindPromise;

23}

25export default function Search() {

26 let open = $state(false);

27 let query = $state("");

28 let results = $state([]);

29 let active = $state(0);

30 let loading = $state(false);

31 const inputRef = $ref();

33 let timer;

34 let token = 0;

36 async function runSearch(q) {

build/frontmatter.jsView file

Lines 1-38javascript

1// Minimal YAML frontmatter reader for the nav generator.

2//

3// Mirrors the flat-scalar parser in the Rust MDX front-end

4// (crates/otfw_compiler/src/mdx.rs `frontmatter_object`): a leading `---` block of

5// `key: value` lines, scalars only. Booleans/numbers are coerced; everything else is

6// a string. Nested maps / lists are out of scope (a follow-up, same as the Rust side).

8import { readFileSync } from "node:fs";

10/** Parse the leading frontmatter block of an .mdx/.md file into a flat object. */