registry / @stainless-code/codemap / 0.11.4

@stainless-code/codemap@0.11.4

Local codebase intelligence for AI agents — a SQLite index of symbols, imports, and calls. SQL and recipes instead of scanning the tree.

AI Security Review

scanned 16h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `codemap agents init` with `--mcp`, integration targets, or `--git-hooks`.

Impact

Configures Codemap as an MCP server and may schedule background local indexing after Git events.

Mechanism

User-invoked agent configuration and optional Git-hook setup.

Rationale

The package is not malicious by source evidence, but its explicit command can mutate AI-agent control surfaces and hooks. Per firewall policy this is a warn-level capability, not a publish block.

Evidence

package.jsondist/index.mjsdist/cmd-agents-BtBusgy-.mjsdist/agents-init-_ecFXOIb.mjsdist/cmd-serve-C9I1DmEd.mjs.agents/.cursor/mcp.json.mcp.json.vscode/mcp.json.claude/settings.json.git/hooks/post-commit.git/hooks/post-merge.git/hooks/post-checkout

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Benign with low false-positive risk.

Evidence for warning

Explicit `codemap agents init --mcp` writes MCP configurations and Claude permissions.
Optional `--git-hooks` writes post-commit, post-merge, and post-checkout hooks.
The init registry includes a user-global Windsurf MCP path when explicitly targeted.

Evidence against

package.json has no preinstall/install/postinstall hook; `prepare` only invokes Husky.
Agent and hook mutations are reachable only through the explicit `agents init` command and flags.
No outbound network client or credential-exfiltration path was found.
CLI import is guarded by `isMainModule()`; library import does not run commands.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 67 file(s), 828 KB of source, external domains: 127.0.0.1, code.claude.com, code.visualstudio.com, docs.aws.amazon.com, docs.cline.bot, docs.continue.dev, docs.cursor.com, docs.github.com, docs.windsurf.com, github.com, raw.githubusercontent.com

Source & flagged code

1 flagged

dist/db-Dv2noOwx.mjsView file

Lines 1-27javascript

1

2import { t as __exportAll } from "./rolldown-runtime-C2Q2p085.mjs";

3import { s as getDatabasePath } from "./runtime-EIHergg0.mjs";

4import { createRequire } from "node:module";

5import { mkdirSync } from "node:fs";

6import { dirname } from "node:path";

7//#region src/sqlite-db.ts

8const require = createRequire(import.meta.url);

9/**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/db-Dv2noOwx.mjsView on unpkg · L7

10* `better-sqlite3` allows only one statement per `prepare()`; `bun:sqlite` accepts several.

11* On Node we split on `;` — do not put `;` inside `--` line comments in `db.ts` SQL strings.

12*/

13function runSql(inner, sql, params) {

14 if (params !== void 0 && params.length > 0) {

15 inner.run(sql, params);

16 return;

17 }

18 if (typeof Bun !== "undefined") {

19 inner.run(sql);

20 return;

21 }

22 const parts = sql.split(";").map((s) => s.trim()).filter(Boolean);

23 if (parts.length <= 1) inner.run(sql.trim());

24 else for (const p of parts) inner.run(p);

25}

26function openRaw(path) {

27 if (typeof Bun !== "undefined") {

Source & flagged code

1 flagged · loading source

dist/db-Dv2noOwx.mjsView file

7//#region src/sqlite-db.ts L8: const require = createRequire(import.meta.url); L9: /**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/db-Dv2noOwx.mjsView on unpkg · L7

Findings

4 Medium5 Low

MediumDynamic Requiredist/db-Dv2noOwx.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LPM CLI

Entrypointsmain → ./dist/index.mjstypes → ./dist/index.d.mtsexports mapbin → codemap

Runtimebun >=1.0.31node ^20.19.0 || >=22.12.0

Artifact1.20 MB · 229 files1 signature(s) · provenance

Install lifecycleprepareprepublishOnly

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

1 flagged

dist/db-Dv2noOwx.mjsView file

Lines 1-27javascript

1

2import { t as __exportAll } from "./rolldown-runtime-C2Q2p085.mjs";

3import { s as getDatabasePath } from "./runtime-EIHergg0.mjs";

4import { createRequire } from "node:module";

5import { mkdirSync } from "node:fs";

6import { dirname } from "node:path";

7//#region src/sqlite-db.ts

8const require = createRequire(import.meta.url);

9/**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/db-Dv2noOwx.mjsView on unpkg · L7

10* `better-sqlite3` allows only one statement per `prepare()`; `bun:sqlite` accepts several.

11* On Node we split on `;` — do not put `;` inside `--` line comments in `db.ts` SQL strings.

12*/

13function runSql(inner, sql, params) {

14 if (params !== void 0 && params.length > 0) {

15 inner.run(sql, params);

16 return;

17 }

18 if (typeof Bun !== "undefined") {

19 inner.run(sql);

20 return;

21 }

22 const parts = sql.split(";").map((s) => s.trim()).filter(Boolean);

23 if (parts.length <= 1) inner.run(sql.trim());

24 else for (const p of parts) inner.run(p);

25}

26function openRaw(path) {

27 if (typeof Bun !== "undefined") {