@ory/opencode@1.7.0
Ory plugin for OpenCode: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package enables reova install analytics and supplies its endpoint, so dependency installation can transmit telemetry automatically. The payload excludes many sensitive fields but may include an identifying email domain, making this suspicious install-time telemetry rather than malicious exfiltration.
Static reason
No blocking static signals were detected.
Trigger
Installation of the reova dependency runs its postinstall hook.
Impact
Installers may have identifying organizational metadata and routine machine details sent without an installer prompt.
Mechanism
The hook tracks opted-in dependent packages and posts collected analytics to the endpoint configured in package.json.
AI rationale
The package enables reova install analytics and supplies its endpoint, so dependency installation can transmit telemetry automatically. The payload excludes many sensitive fields but may include an identifying email domain, making this suspicious install-time telemetry rather than malicious exfiltration.
Evidence
package.json.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/package.json.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/index.js.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/src/tracker.js.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/src/collector.js
Network endpoints1
telemetry.reo.dev/data
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package enables reova analytics and configures https://telemetry.reo.dev/data.
- reova runs a postinstall hook that starts tracking automatically.
- The install analytics payload can include the installer’s email domain from git config.
Evidence against
- The collector says it excludes the full email address, git name, file paths, dependency list, and environment variables.
- The telemetry payload otherwise contains package, runtime, platform, CPU count, timestamp, CI status, and a random event ID.
Behavioral surface
EnvironmentVarsFilesystem
UrlStrings
Source & flagged code
4 flaggedpackage.jsonView file
47"reova": {
"enabled": true,
"endpoint": "https://telemetry.reo.dev/data"
},
"main": "dist/index.js",
"types": "dist/index.d.ts",
"exports": {
".": {
Medium
Ai Review Evidence
The package enables reova analytics and configures https://telemetry.reo.dev/data.
package.jsonView on unpkg · L47.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/package.jsonView file
6"scripts": {
"postinstall": "node index.js",
"test": "node test-local-install.js"
},
"keywords": [
Medium
Suspicious Lifecycle Evidence
reova runs a postinstall hook that starts tracking automatically.
.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/package.jsonView on unpkg · L6Findings
5 Medium3 Low
MediumEnvironment Vars
MediumAi Review Evidencepackage.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/package.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/index.js
MediumAi Review Evidence.lpm-dependency-evidence-cfc43516-0740-4bdd-8c52-ed47000064d6/1/npm-linux/src/collector.js
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @ory/opencode@1.7.0.
See all versions of @ory/opencode for other recorded verdicts.
- Review the evidence and your use of @ory/opencode@1.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.