registry / @prosopo/procaptcha-bundle / 4.5.5
@prosopo/procaptcha-bundle@4.5.5
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected entrypoint behavior is consistent with captcha rendering and detector setup. The scanner's runtime-bridge signal resolves to an empty shim, with no concrete attack behavior established.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing the bundle; detector prefetch requires a site key and non-manual start mode.
Impact
No malicious effect was established in the inspected code.
Mechanism
The entrypoint loads Prosopo captcha modules and invokes detector prefetch with the configured environment, selected IP mode, and site key.
AI rationale
The manifest has no install lifecycle hook, and the inspected entrypoint behavior is consistent with captcha rendering and detector setup. The scanner's runtime-bridge signal resolves to an empty shim, with no concrete attack behavior established.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json identifies the package and exports dist/index.js as its import entrypoint.
- The package scripts shown are build and maintenance commands; no install lifecycle hook is declared.
- dist/index.js prefetches Prosopo frictionless detector code only when a site key exists and start mode is not manual.
- The flagged runtime shim only imports node:module and exports an empty module.
Evidence against
- dist/index.js contains a generated runtime shim import and reads environment configuration for captcha setup.
Behavioral surface
CryptoEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
5package = @prosopo/procaptcha-bundle; repositoryIdentity = captcha; dependency = @prosopo/procaptcha-common
L5: import { WidgetThemeResolver } from "./util/widgetThemeResolver.js";
L6: import { getWindowCallback } from "@prosopo/procaptcha-common";
L7: import { PROCAPTCHA_START_EVENT, StartModeEnum } from "@prosopo/types";
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/index.jsView on unpkg · L533the entry chunk and delay first paint. Firing the import here starts that
* download in parallel with the widget's own chunks rather than after them.
*
* Fire-and-forget by design — a failed prefetch is indistinguishable from no
* prefetch, and the detection path falls back to resolving a provider itself.
*/
var startDetectorPrefetch = (siteKey, flags) => {
if (!siteKey) return;
if (flags.startMode === StartModeEnum.manual) return;
Promise.all([import("@prosop
Low
Ai Review Evidence
dist/index.js prefetches Prosopo frictionless detector code only when a site key exists and start mode is not manual.
dist/index.jsView on unpkg · L33package.jsonView file
Findings
1 High2 Medium8 Low
HighCopied Package Dependency Bridgedist/index.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/_virtual/_rolldown/runtime.js
Affected versions and remediation
This report applies to @prosopo/procaptcha-bundle@4.5.5.
See all versions of @prosopo/procaptcha-bundle for other recorded verdicts.
- Review the evidence and your use of @prosopo/procaptcha-bundle@4.5.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.