registry / @ownmail/app / 0.5.0
@ownmail/app@0.5.0
The OwnMail mailbox and calendar app for Cloudflare Workers and Node hosting
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic source inspection shows a deployable mailbox application with authenticated, provider-aligned Nylas calls and optional constrained Upstash storage. Scanner signals for dynamic import, environment variables, and compiled blobs are explained by normal build/runtime implementation and do not form a malicious chain.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Authenticated OwnMail application use or signed Nylas webhook delivery
Impact
Expected email application behavior; no credential harvesting, persistence, remote payload execution, or AI-agent control-surface mutation observed.
Mechanism
Session-scoped mailbox, attachment, and calendar operations
AI rationale
Static source inspection shows a deployable mailbox application with authenticated, provider-aligned Nylas calls and optional constrained Upstash storage. Scanner signals for dynamic import, environment variables, and compiled blobs are explained by normal build/runtime implementation and do not form a malicious chain.
Evidence
package.jsonscripts/serve-node.mjssrc/server/nylas.tssrc/server/platform.tssrc/server/session.tssrc/server/fns.tssrc/routes/auth.callback.tssrc/routes/api.webhooks.nylas.tssrc/routes/attachments.$attachmentId.tsdist-vercel/server/assets/platform-BFgC_n1D.jsdist-vercel/server/assets/mail.compose-8lAgZYyp.js
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- `package.json` has no preinstall, install, postinstall, or bin entrypoint.
- `scripts/serve-node.mjs` binds only to loopback hosts and rejects path traversal.
- `src/server/fns.ts` resolves mailbox grants only from signed server-side sessions.
- `src/routes/api.webhooks.nylas.ts` HMAC-verifies webhooks before state updates.
- `src/server/platform.ts` restricts optional Redis to `https://*.upstash.io/` and disables telemetry.
- Compiled compose/platform bundles match readable app behavior; dynamic imports are route splitting and `cloudflare:workers` fallback.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
Source & flagged code
10 flaggeddist/server/assets/platform-CtVjpY2v.jsView file
3926*/
L3927: async eval(keys, args) {
L3928: await this.init(this.script);
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/server/assets/platform-CtVjpY2v.jsView on unpkg · L3926dist-vercel/server/server.jsView file
3131async function getStartManifest(matchedRoutes) {
L3132: const { tsrStartManifest } = await import("./assets/_tanstack-start-manifest_v-xaU4gnQn.js");
L3133: const startManifest = tsrStartManifest();
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist-vercel/server/server.jsView on unpkg · L3131.vercel/output/static/fonts/manrope-latin.woff2View file
Findings
2 High10 Medium7 Low
HighShips High Entropy Blob.vercel/output/static/fonts/manrope-latin.woff2
HighPrevious Version Dangerous Deltadist-vercel/server/assets/mail.compose-8lAgZYyp.js
MediumDynamic Requiredist-vercel/server/server.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/server/fns.test.ts
MediumSecret Patternsrc/server/fns.test.ts
MediumSecret Patternsrc/server/fns.test.ts
MediumSecret Patternsrc/server/fns.test.ts
MediumSecret Patternsrc/server/fns.test.ts
MediumSecret Patternsrc/routes/-settings.test.tsx
Low
Affected versions and remediation
This report applies to @ownmail/app@0.5.0.
See all versions of @ownmail/app for other recorded verdicts.
- Review the evidence and your use of @ownmail/app@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.