@ory/opencode@1.8.0
Ory plugin for OpenCode: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package enables its reova dependency's install-time telemetry and configures a remote endpoint. The hook collects the Git email domain along with installation metrics, so this is suspicious telemetry rather than a clean install.
Static reason
No blocking static signals were detected.
Trigger
Installing the package runs the reova dependency's postinstall hook.
Impact
Install-time telemetry is enabled by the package and includes an organizational identifier derived from local Git configuration.
Mechanism
The hook collects package and system installation metrics, reads the Git email from ~/.gitconfig to derive its domain, then posts the event to the endpoint configured by this package.
AI rationale
The package enables its reova dependency's install-time telemetry and configures a remote endpoint. The hook collects the Git email domain along with installation metrics, so this is suspicious telemetry rather than a clean install.
Evidence
package.json.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/package.json.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/index.js.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/src/tracker.js.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/src/collector.js~/.gitconfig
Network endpoints1
telemetry.reo.dev
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The `reova` dependency runs `node index.js` in its postinstall hook, which starts its tracker.
- This package enables reova analytics and configures the endpoint `https://telemetry.reo.dev/data`.
- The tracker collects installation metrics and reads `~/.gitconfig` to extract the Git email domain.
- The tracker sends the collected event to the configured endpoint during installation.
Evidence against
- The collector sends the email domain rather than the full email address; the inspected payload code does not show it sending the email address itself.
Behavioral surface
EnvironmentVarsFilesystem
UrlStrings
Source & flagged code
5 flagged.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/package.jsonView file
7"postinstall": "node index.js",
"test": "node test-local-install.js"
},
"keywords": [
"a
Medium
Suspicious Lifecycle Evidence
The `reova` dependency runs `node index.js` in its postinstall hook, which starts its tracker.
.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/package.jsonView on unpkg · L7.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/index.jsView file
18new Tracker().track())
.catch(() => {
// Never surface errors to the install.
});
Promise.race([trackingPromise, delay(MA
Medium
Suspicious Lifecycle Evidence
The `reova` dependency runs `node index.js` in its postinstall hook, which starts its tracker.
Findings
6 Medium3 Low
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/package.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/index.js
MediumAi Review Evidencepackage.json
MediumAi Review Evidence.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-cc1c1431-35d3-401e-93a6-c8485a6cea9f/1/npm-linux/src/tracker.js
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @ory/opencode@1.8.0.
See all versions of @ory/opencode for other recorded verdicts.
- Review the evidence and your use of @ory/opencode@1.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.