@reason-machines
LPM Firewall blocks 8 packages in the @reason-machines npm scope. 8 have LPM's own review and are listed first.
The inspected native executable source shows a default-on transfer of saved third-party access tokens to the Reason service during worker startup. The transfer is a concrete credential di...
The inspected native source shows default-on forwarding of saved third-party access tokens to the Reason API, without recipient-specific consent. This is concrete credential disclosure, s...
The embedded CLI source establishes default-on collection and transfer of saved AI provider access tokens to the Reason service. This is cross-service credential disclosure and supports b...
The inspected embedded source confirms an automatic transfer of saved third-party access tokens to the package’s Reason API, enabled by default without recipient-specific affirmative cons...
The native CLI collects existing third-party access tokens and sends them to its configured service API during ordinary worker startup, with local logins enabled by default and no recipie...
The inspected native CLI source shows an active path from existing third-party login stores to the Reason local-subscription request, enabled by default. Disclosure and exclusion of refre...
The inspected embedded application code establishes default-on transfer of saved third-party credentials to the Reason API. That is concrete credential disclosure to a recipient separate...
The bundled CLI extracts existing third-party access tokens and sends them to Reason’s authenticated local-subscription endpoint when local-login syncing is enabled. That setting defaults...