@threadplane/langgraph@0.2.0
LangGraph adapter for the Angular AI agent UI — provideAgent()/injectAgent() expose a run as Angular Signals.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiFresh source inspection confirms default personal-data export, warranting a warning. First-party disclosure, effective opt-out controls, and constrained collection do not support a low-false-positive malware block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package-manager postinstall execution unless collection is disabled through environment controls.
Impact
Personal Git identity and repository owner information can leave the consumer environment without affirmative opt-in.
Mechanism
Reads bounded Git configuration files, extracts name and email, and includes them in an HTTPS installation report.
AI rationale
Fresh source inspection confirms default personal-data export, warranting a warning. First-party disclosure, effective opt-out controls, and constrained collection do not support a low-false-positive malware block.
Evidence
package.jsoninstall/postinstall.cjsinstall/policy.cjsinstall/git-context.cjsinstall/collector.cjs.gitconfig.git/config.threadplane/installation-id.install-collector/development-install.mjs
Network endpoints1
threadplane.ai/api/growth/collect/v1/install
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json automatically runs the install collector through postinstall.
- The collector reads global and consumer Git configuration and extracts the configured name and full email.
- Collected Git identity is included in an installation event sent by HTTPS POST to Threadplane's growth endpoint.
- Collection is enabled by default; environment variables provide opt-out controls rather than affirmative consent.
Evidence against
- The destination is a fixed first-party endpoint, with no redirect following or remote payload execution.
- README.md discloses automatic collection and opt-out controls; inspected collection code does not gather credentials or source content.
- Writes are limited to a vendor installation identifier and a package-local correlation module.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node install/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg52"postinstall": "node install/postinstall.cjs"
},
"module": "fesm2022/threadplane-langgraph.mjs",
Medium
Suspicious Lifecycle Evidence
package.json automatically runs the install collector through postinstall.
package.jsonView on unpkg · L52install/git-context.cjsView file
Findings
2 High7 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPrevious Version Dangerous Deltainstall/git-context.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidenceinstall/git-context.cjs
MediumSuspicious Lifecycle Evidenceinstall/postinstall.cjs
MediumAi Review Evidenceinstall/git-context.cjs
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @threadplane/langgraph@0.2.0.
See all versions of @threadplane/langgraph for other recorded verdicts.
- Review the evidence and your use of @threadplane/langgraph@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.