registry / @openuidev/lang-core / 0.4.0

@openuidev/lang-core@0.4.0

Framework-agnostic core for OpenUI Lang: parser, prompt generation, validation, and type definitions

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Source inspection found disclosed, disableable install telemetry and opt-in, sampled runtime telemetry. The inspected payloads and gates do not establish malicious behavior, so the scanner’s flags do not support a block.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Installation runs the postinstall hook; runtime telemetry runs only when explicitly enabled and the relevant package API is used.

Impact

Telemetry discloses limited installation and runtime metadata; inspected code does not establish credential theft or another attack.

Mechanism

Installation telemetry sends pseudonymous identifiers and environment metadata to the configured PostHog endpoint, unless disabled. Runtime telemetry sends aggregate configuration or parser outcome data only after opt-in.

AI rationale

Evidence

~/.config/openui/telemetry.json

Network endpoints1

dgoeivjus9jfp.cloudfront.net

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook sends installation telemetry to the configured PostHog endpoint and supports telemetry disable flags.
The install payload contains pseudonymous identifiers and environment metadata; runtime telemetry requires an explicit opt-in and is sampled.
The declaration file describes the package’s parser API.

Evidence against

The install hook is disclosed in its output and honors disable flags; inspected code shows no credential or application-data collection.
Runtime telemetry is gated by an explicit environment opt-in, a disable check, and a sample rate.
The package manifest identifies the expected package and repository.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 314 KB of source, external domains: dgoeivjus9jfp.cloudfront.net, example.com, zod.dev

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node ./postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @openuidev/lang-core@0.3.0 matchedIdentity = npm:QG9wZW51aWRldi9sYW5nLWNvcmU:0.3.0 similarity = 0.714 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.cjsView on unpkg

99function readGitOrigin(processLike) { L100: const execFile = (processLike.getBuiltinModule?.("node:child_process"))?.execFile; L101: if (!execFile) return Promise.resolve(void 0);

High

Child Process

Package source references child process execution.

dist/index.cjsView on unpkg · L99

142package = @openuidev/lang-core; repositoryIdentity = openui; dependency = ci-info L142: try { L143: const ciInfo = await import("ci-info"); L144: return {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.cjsView on unpkg · L142

79Cross-file remote execution chain: dist/index.cjs spawns dist/shared-BuVpfVsg.cjs; helper contains network access plus dynamic code execution. L79: }; L80: if (typeof target.WebSocketPair === "function") return { name: "edge" }; L81: if (isBrowserWorker()) return void 0; ... L99: function readGitOrigin(processLike) { L100: const execFile = (processLike.getBuiltinModule?.("node:child_process"))?.execFile; L101: if (!execFile) return Promise.resolve(void 0); ... L112: windowsHide: true L113: }, (error, stdout) => { L114: const origin = stdout?.trim(); ... L159: headers: { "content-type": "application/json" }, L160: body: JSON.stringify({ L161: api_key: postHog.apiKey,

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.cjsView on unpkg · L79

dist/index.d.cts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index.d.cts#virtual:normalized:round1View on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.cjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.cjs

Findings

1 Critical5 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/index.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/index.cjs

HighCopied Package Dependency Bridgedist/index.cjs

HighCross File Remote Execution Contextdist/index.cjs

HighSemantic Analysis Limiteddist/index.d.cts#virtual:normalized:round1

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @openuidev/lang-core@0.4.0.

See all versions of @openuidev/lang-core for other recorded verdicts.

Review the evidence and your use of @openuidev/lang-core@0.4.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-10 14:39:33.955Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.