registry / @weave-os/router / 0.2.30
@weave-os/router@0.2.30
One-command installer that points Claude Code, Codex, opencode, or pi at the Weave Router. For pi it also ships the routing extension, loaded via pi.extensions.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and its flagged process and network behavior matches its documented router installer and LSP purpose. Credentials are obtained for the router and sent to the configured router endpoint during explicit setup.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The installer and uninstaller run after explicit CLI invocation; LSP spawning occurs when the extension starts a configured language server.
Impact
No unauthorized credential transfer, account action, persistence, or destructive behavior was identified.
Mechanism
The installer validates a router key against the configured router URL and writes selected client settings; the LSP transport launches its configured command without a shell.
AI rationale
The package has no install lifecycle hook, and its flagged process and network behavior matches its documented router installer and LSP purpose. Credentials are obtained for the router and sent to the configured router endpoint during explicit setup.
Evidence
.claude/settings.json.codex/config.tomlopencode.jsonproviders.jsonmodels.json
Network endpoints2
router.workweave.aiuser-configured router base URL
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares only a prepack script, with no install, postinstall, or preinstall hook.
- The CLI opens the setup page only when a user invokes it without arguments; otherwise it runs the installer.
- The Windows installer gets a router key from an environment variable, installed config, or user prompt, then probes the configured router URL.
- The installer writes the router key into the selected client’s provider configuration as setup requires.
- The LSP process launcher uses shell:false and is explicitly a transport for a configured language server.
- Install state-change reporting sends only an action and client name to the configured router endpoint.
Evidence against
- The package includes network access, process execution, and configuration writes, but these are part of its user-invoked router setup and LSP functions.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggedpi-router/src/lsp-client.tsView file
8L9: import { spawn as nodeSpawn, type ChildProcess, type SpawnOptions } from "node:child_process";
L10: import * as path from "node:path";
High
Child Process
Package source references child process execution.
pi-router/src/lsp-client.tsView on unpkg · L8windows.jsView file
1#!/usr/bin/env node
L2: // Native Windows entrypoint. PowerShell users do not need Git Bash, jq, or
L3: // another installation beyond the npx command they already ran.
...
L13:
L14: const defaultBaseUrl = process.env.WEAVE_ROUTER_URL || "https://router.workweave.ai";
L15: const packageName = process.env.WEAVE_ROUTER_NPM_PACKAGE || "@weave-os/router";
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
windows.jsView on unpkg · L1•matchType = previous_version_dangerous_delta
matchedPackage = @weave-os/router@0.2.29
matchedIdentity = npm:QHdlYXZlLW9zL3JvdXRlcg:0.2.29
similarity = 0.763
summary = stored previous version shares package body but lacks this dangerous source file
Findings
4 High4 Medium4 Low
HighChild Processpi-router/src/lsp-client.ts
HighSame File Env Network Executionwindows.js
HighSandbox Evasion Gated Capabilitybin.js
HighPrevious Version Dangerous Deltawindows.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperuninstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @weave-os/router@0.2.30.
See all versions of @weave-os/router for other recorded verdicts.
- Review the evidence and your use of @weave-os/router@0.2.30 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.