registry / @openuidev/lang-core / 0.3.2
@openuidev/lang-core@0.3.2
Framework-agnostic core for OpenUI Lang: parser, prompt generation, validation, and type definitions
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe install-time network behavior is disclosed package telemetry, and its disable flags are checked before the telemetry routine proceeds. The runtime hint is ordinary query error handling; the scanner’s similarity label is not supported by inspected malicious behavior.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Installing the package runs its postinstall hook.
Impact
Pseudonymous installation analytics are sent by default; the inspected source does not collect credentials or application data.
Mechanism
The hook sends a random installation ID, a salted project identity, and package and system metadata to a configured PostHog capture endpoint; it honors telemetry disable flags.
AI rationale
The install-time network behavior is disclosed package telemetry, and its disable flags are checked before the telemetry routine proceeds. The runtime hint is ordinary query error handling; the scanner’s similarity label is not supported by inspected malicious behavior.
Network endpoints1
dgoeivjus9jfp.cloudfront.net
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest routes installation through the package postinstall entry.
- The install event sends a random installation ID, a salted project identity, and package and system metadata.
- The install notice describes the telemetry, and the routine honors the stated disable flags.
- The telemetry endpoint is configured as a PostHog capture endpoint, with an environment override.
- The runtime hint is ordinary MCP query error handling in both module formats.
- The declaration entry describes parser types, not executable behavior.
Evidence against
- Installation telemetry runs by default; the opt-out flags do not require affirmative consent, and the project identity is hashed rather than omitted.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @openuidev/lang-core@1.0.0
matchedIdentity = npm:QG9wZW51aWRldi9sYW5nLWNvcmU:1.0.0
similarity = 0.714
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.cjsFindings
1 Critical9 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.cjs
HighCopied Package Dependency Bridgedist/index.cjs
HighCross File Remote Execution Contextdist/index.cjs
HighSemantic Analysis Limiteddist/index.d.cts#virtual:normalized:round1
HighKnown Malware Source Similaritydist/postinstall.cjs
HighKnown Malware Source Similaritydist/postinstall.mjs
HighKnown Malware Source Similaritydist/shared-BuVpfVsg.cjs
HighKnown Malware Source Similaritydist/shared-Dzgc28Wo.mjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
Affected versions and remediation
This report applies to @openuidev/lang-core@0.3.2.
See all versions of @openuidev/lang-core for other recorded verdicts.
- Review the evidence and your use of @openuidev/lang-core@0.3.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.