@sortlist/cli@0.50.0
Sortlist platform CLI — GraphQL federation client
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe source shows runtime exception reporting to a fixed Sentry service without an indicated user opt-out, so this is undisclosed telemetry. The automatic update mechanism fetches this package from npm; the inspected source does not show it downloading unrelated code or stealing credentials.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI outside a local development checkout; telemetry is triggered by reported exceptions, while update checks occur before command parsing.
Impact
Exception details and context may be disclosed to the Sentry service without an indicated opt-out; automatic updates can replace the installed CLI without a separate confirmation.
Mechanism
Sentry captures exceptions and optional context at a fixed DSN. The update check queries the npm registry and automatically invokes npm install when a newer version is found.
AI rationale
The source shows runtime exception reporting to a fixed Sentry service without an indicated user opt-out, so this is undisclosed telemetry. The automatic update mechanism fetches this package from npm; the inspected source does not show it downloading unrelated code or stealing credentials.
Evidence
dist/index.jsglobal npm installation of @sortlist/cli
Network endpoints2
o27611.ingest.us.sentry.ioregistry.npmjs.org
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI initializes Sentry with a fixed DSN for non-local runs and captures exceptions, including optional extra context.
- Every CLI invocation checks for updates before parsing the command; when a newer version exists, it automatically runs npm install for the package.
- The CLI also performs normal authenticated GraphQL requests to its configured Sortlist endpoint.
Evidence against
- The package is described as a Sortlist platform CLI, and its token requests send Sortlist application credentials to a configurable token endpoint.
- The automatic updater fetches the latest version from the npm registry for this same package.
- The launcher executes the package’s CLI entry point and forwards the existing environment.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedbin/sl.mjsView file
1#!/usr/bin/env node
L2: import { execFileSync } from 'node:child_process';
L3: import { existsSync, readFileSync } from 'node:fs';
High
1Cross-file remote execution chain: bin/sl.mjs spawns dist/index.js; helper contains network access plus dynamic code execution.
L1: #!/usr/bin/env node
L2: import { execFileSync } from 'node:child_process';
L3: import { existsSync, readFileSync } from 'node:fs';
...
L6:
L7: const __dirname = dirname(fileURLToPath(import.meta.url));
L8: const selfRoot = resolve(__dirname, '..');
...
L11: * Walk upward from `start` looking for a @sortlist/cli checkout
L12: * (package.json with name === "@sortlist/cli" and no .published sentinel).
L13: * Returns the package root, or null.
...
L20: try {
L21: const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
L22: if (pkg.name === '@sortlist/cli' && !existsSync(resolve(dir, '.published'))) {
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
bin/sl.mjsView on unpkg · L1dist/index.jsView file
Findings
1 Critical2 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processbin/sl.mjs
HighCross File Remote Execution Contextbin/sl.mjs
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/index.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @sortlist/cli@0.50.0.
See all versions of @sortlist/cli for other recorded verdicts.
- Review the evidence and your use of @sortlist/cli@0.50.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.