@uipath/insights-sdk@1.196.0

One or more suspicious static signals were detected.

User imports the SDK and calls exported functions.

Legitimate API requests and local UiPath auth file reads/writes when auth helpers are invoked; no credential harvesting or unaligned exfiltration found.

UiPath Insights API client and auth helper bundle

Static inspection found suspicious primitives explained by UiPath SDK/auth functionality and bundled dependencies, with no lifecycle hook, import-time execution, unaligned endpoint, persistence, destructive action, or credential exfiltration. The Base64-obscured Application Insights string is a telemetry constant but this bundle falls back to LoggerTelemetryProvider and does not use it for outbound initialization.