@threadplane/render@0.2.0
Angular render engine for agent-generated UI: maps JSON specs onto your own design-system components.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource confirms default transmission of personal Git identity during installation, supporting a warning for data exposure. The disclosed vendor collection and effective opt-outs do not establish malicious intent strongly enough to justify blocking.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
An npm installation runs postinstall unless lifecycle scripts or collection are disabled.
Impact
Developer identity and repository owner information can leave the machine during installation, including CI.
Mechanism
The collector reads Git configuration, attaches names and full emails to installation events, and sends them by HTTPS without an opt-in gate.
AI rationale
Source confirms default transmission of personal Git identity during installation, supporting a warning for data exposure. The disclosed vendor collection and effective opt-outs do not establish malicious intent strongly enough to justify blocking.
Evidence
package.jsoninstall/postinstall.cjsinstall/git-context.cjsinstall/collector.cjsinstall/policy.cjsREADME.md.gitconfig.git/config.threadplane/installation-id.install-collector/development-install.mjs
Network endpoints1
threadplane.ai/api/growth/collect/v1/install
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json automatically runs an installation collector through postinstall.
- install/git-context.cjs reads global Git configuration and collects the configured full email address.
- install/collector.cjs sends collected identity in installation events to a fixed Threadplane HTTPS endpoint.
- Collection is enabled by default; install/policy.cjs provides environment-variable opt-outs.
- README.md discloses automatic collection of Git names and full emails, including in CI.
Evidence against
- The destination belongs to the package vendor and cannot be overridden in the inspected collector.
- Configuration reads are bounded; repository hints exclude raw URLs and repository names.
- No credential theft, remote payload execution, or broad agent configuration mutation was identified.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node install/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg42"postinstall": "node install/postinstall.cjs"
},
"module": "f
Medium
Suspicious Lifecycle Evidence
package.json automatically runs an installation collector through postinstall.
package.jsonView on unpkg · L42install/git-context.cjsView file
Findings
2 High7 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPrevious Version Dangerous Deltainstall/git-context.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidenceinstall/git-context.cjs
MediumAi Review Evidenceinstall/git-context.cjs
MediumAi Review Evidenceinstall/collector.cjs
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @threadplane/render@0.2.0.
See all versions of @threadplane/render for other recorded verdicts.
- Review the evidence and your use of @threadplane/render@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.