registry / @openuidev/lang-core / 0.2.11

@openuidev/lang-core@0.2.11

Framework-agnostic core for OpenUI Lang: parser, prompt generation, validation, and type definitions

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The lifecycle script performs disclosed, opt-out pseudonymous telemetry using a fixed endpoint; its git invocation has fixed arguments and identifiers are hashed before transmission. Source inspection found no concrete malicious chain.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall; 10% of server-side generateSystemPrompt calls

Impact

Telemetry endpoint receives installation/runtime metadata and salted or hashed project identifiers.

Mechanism

hashed telemetry POST with local state persistence

AI rationale

Evidence

package.jsonpostinstall.cjsdist/postinstall.cjsdist/index.cjsdist/shared-DLdEf3EH.cjsREADME.md

Network endpoints1

dgoeivjus9jfp.cloudfront.net/capture/

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json runs postinstall.cjs on install.
dist/postinstall.cjs sends installation telemetry to CloudFront/PostHog.
dist/postinstall.cjs reads local Git origin and persists telemetry state.

Evidence against

Telemetry payload hashes project identity locally and excludes raw origin.
README.md discloses install/runtime telemetry and opt-out variables.
Child-process use is fixed-argument git config only; no shell or dynamic code execution.
No agent-control writes, destructive behavior, credential harvesting, or remote payload loading found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 273 KB of source, external domains: dgoeivjus9jfp.cloudfront.net, example.com, zod.dev

Source & flagged code

4 flagged

package.jsonView file

Lines 54-77json

54 "bugs": {

55 "url": "https://github.com/thesysdev/openui/issues"

56 },

57 "author": "engineering@thesys.dev",

58 "devDependencies": {

59 "@modelcontextprotocol/sdk": "^1.27.1",

60 "@types/node": "^20",

61 "vitest": "^4.0.18"

62 },

63 "scripts": {

64 "test": "vitest run",

65 "build": "tsdown",

66 "watch": "tsdown --watch",

67 "typecheck": "tsc --noEmit",

68 "lint:check": "eslint ./src",

69 "lint:fix": "eslint ./src --fix",

70 "format:fix": "prettier --write ./src",

71 "format:check": "prettier --check ./src",

72 "check:publint": "publint",

73 "check:attw": "attw --pack .",

74 "postinstall": "node ./postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L74

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L74

75 "ci": "pnpm run lint:check && pnpm run format:check"

76 }

77}

dist/index.cjsView file

Lines 57-117javascript

57 const workerGlobalScope = globalThis.WorkerGlobalScope;

58 return Boolean(workerGlobalScope && workerGlobalScope.prototype.isPrototypeOf(globalThis));

59}

60function detectRuntime

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.cjsView file

97function readGitOrigin(processLike) { L98: const execFile = (processLike.getBuiltinModule?.("node:child_process"))?.execFile; L99: if (!execFile) return Promise.resolve(void 0);

High

Child Process

Package source references child process execution.

dist/index.cjsView on unpkg · L97

Findings

4 High4 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/index.cjs

HighShell

HighCross File Remote Execution Contextdist/index.cjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @openuidev/lang-core@0.2.11.

See all versions of @openuidev/lang-core for other recorded verdicts.

Review the evidence and your use of @openuidev/lang-core@0.2.11 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-05 12:04:56.668Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.