registry / @prosopo/procaptcha-bundle / 4.5.13
@prosopo/procaptcha-bundle@4.5.13
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest has no install hook, and the inspected entrypoint uses its environment setting only for a gated captcha detector prefetch. The suspicious static hints do not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Loading the browser entrypoint or rendering a widget with a site key in a non-manual start mode.
Impact
The inspected behavior serves captcha initialization; no credential transfer or other concrete attack was established.
Mechanism
The entrypoint imports Prosopo detector components and starts a detector prefetch using widget configuration.
AI rationale
The manifest has no install hook, and the inspected entrypoint uses its environment setting only for a gated captcha detector prefetch. The suspicious static hints do not establish malicious behavior.
Evidence
package.jsondist/index.js
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json points to dist/index.js and declares no install lifecycle hook; listed scripts are build and development commands.
- dist/index.js prefetches the detector only when a site key exists and start mode is not manual.
- The entrypoint exposes widget render, reset, remove, execute, and start operations, then boots the captcha widget.
- Searches of dist found no cookie, local storage, authorization, or credential-transfer references.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
6package = @prosopo/procaptcha-bundle; repositoryIdentity = captcha; dependency = @prosopo/procaptcha-common
L6: import { WidgetThemeResolver } from "./util/widgetThemeResolver.js";
L7: import { getWindowCallback } from "@prosopo/procaptcha-common";
L8: import { PROCAPTCHA_START_EVENT, StartModeEnum } from "@prosopo/types";
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/index.jsView on unpkg · L640var startDetectorPrefetch = (siteKey, flags, language) => {
if (!siteKey) return;
if (flags.startMode === StartModeEnum.manual) return;
Promise.all([import("@prosopo/procaptcha-frictionless"), import("@prosopo/procapt
Low
Ai Review Evidence
dist/index.js prefetches the detector only when a site key exists and start mode is not manual.
dist/index.jsView on unpkg · L4043Promise.all([import("@prosopo/procaptcha-frictionless"), import("@prosopo/procaptcha-common")]).then(([frictionless, common]) => {
frictionless.prefetchDetector(process.env.PROS
Low
Ai Review Evidence
Findings
1 High2 Medium9 Low
HighCopied Package Dependency Bridgedist/index.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @prosopo/procaptcha-bundle@4.5.13.
See all versions of @prosopo/procaptcha-bundle for other recorded verdicts.
- Review the evidence and your use of @prosopo/procaptcha-bundle@4.5.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.