@prosopo/procaptcha-bundle@4.6.5
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package contains disclosed, conditional runtime telemetry to Prosopo, but the beacon includes the page hostname and site key, which identify the site or project. That identifying telemetry warrants a warning; the inspected flow does not show credential theft or unrelated collection.
Static reason
One or more suspicious static signals were detected.
Trigger
Widget creation, when the build has PROSOPO_PROVIDER_LIST configured and the sampling check passes.
Impact
Prosopo can associate a self-hosted installation and its site with beacon activity; no credentials or visitor data are shown in this flow.
Mechanism
The widget factory calls sendUsageBeacon, which issues a request to Prosopo’s beacon endpoint containing the page hostname, site key, bundle version, and sample rate.
AI rationale
The package contains disclosed, conditional runtime telemetry to Prosopo, but the beacon includes the page hostname and site key, which identify the site or project. That identifying telemetry warrants a warning; the inspected flow does not show credential theft or unrelated collection.
Evidence
dist/esm/util/widgetFactory.js.lpm-dependency-evidence-6d0930b4-1550-4810-9335-5298c28f8995/2/npm-linux/dist/esm/usageBeacon.jsCHANGELOG.md
Network endpoints1
beacon.prosopo.io/v1/b.gif
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Widget creation calls sendUsageBeacon with the configured site key.
- The beacon sends the page hostname, site key, bundle version, and sample rate to beacon.prosopo.io, with a 0.1% sampling rate.
- Sending is limited to builds with PROSOPO_PROVIDER_LIST and can be disabled with PROSOPO_USAGE_BEACON=false; the request omits credentials and the referrer.
- The changelog describes the beacon and its purpose as counting self-hosted installs.
Evidence against
- The package has no install lifecycle scripts in its metadata.
- The beacon is conditional, sampled, and sent to Prosopo’s own service; the changelog discloses it.
- The collected values identify the site or project, but the inspected code does not show credential or visitor-data collection.
Behavioral surface
EnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/esm/index.jsView file
7package = @prosopo/procaptcha-bundle; repositoryIdentity = captcha; dependency = @prosopo/procaptcha-common
L7: import { WidgetThemeResolver } from "./util/widgetThemeResolver.js";
L8: import { getWindowCallback, startPageBehaviourCapture } from "@prosopo/procaptcha-common";
L9: import { PROCAPTCHA_START_EVENT, StartModeEnum } from "@prosopo/types";
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/esm/index.jsView on unpkg · L7dist/esm/util/widgetFactory.jsView file
49sendUsageBeacon(renderOptions.siteKey);
return {
handle: { destroy: () => {
i18n.off(
Medium
Ai Review Evidence
Widget creation calls sendUsageBeacon with the configured site key.
dist/esm/util/widgetFactory.jsView on unpkg · L49Findings
1 High7 Medium4 Low
HighCopied Package Dependency Bridgedist/esm/index.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/esm/util/widgetFactory.js
MediumAi Review Evidence.lpm-dependency-evidence-6d0930b4-1550-4810-9335-5298c28f8995/2/npm-linux/dist/esm/usageBeacon.js
MediumAi Review Evidence.lpm-dependency-evidence-6d0930b4-1550-4810-9335-5298c28f8995/2/npm-linux/dist/esm/usageBeacon.js
MediumAi Review Evidence.lpm-dependency-evidence-6d0930b4-1550-4810-9335-5298c28f8995/2/npm-linux/dist/esm/usageBeacon.js
MediumAi Review Evidence.lpm-dependency-evidence-6d0930b4-1550-4810-9335-5298c28f8995/2/npm-linux/dist/esm/usageBeacon.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @prosopo/procaptcha-bundle@4.6.5.
See all versions of @prosopo/procaptcha-bundle for other recorded verdicts.
- Review the evidence and your use of @prosopo/procaptcha-bundle@4.6.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.