registry / @siyuan-community/siyuan-sdk / 0.3.15

@siyuan-community/siyuan-sdk@0.3.15

A simple and easy to use SDK for SiYuan.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

No confirmed malicious runtime surface. The only lifecycle action is a prepare-time Husky setup command; runtime networking targets the configured SiYuan endpoint.

Static reason

No blocking static signals were detected.

Trigger

Git/local dependency preparation or explicit SDK client method calls.

Impact

May configure a project Husky hook during preparation; SDK requests can act on the configured SiYuan server.

Mechanism

prepare-time VCS hook setup and user-invoked SiYuan API client

Rationale

Source inspection found a normal SiYuan SDK with no concrete malicious chain. Per lifecycle policy, the prepare-only Husky setup warrants a non-blocking warning.

Evidence

package.jsonsrc/index.tssrc/client/Client.tssrc/constants.tstests/utils/schema.ts

Network endpoints1

localhost:6806/

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Benign with medium false-positive risk.

Evidence for warning

package.json defines a prepare hook that invokes Husky from the parent project.

@siyuan-community/siyuan-sdk@0.3.15

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code