registry / @weave-os/router / 0.2.31
@weave-os/router@0.2.31
One-command installer that points Claude Code, Codex, opencode, or pi at the Weave Router. For pi it also ships the routing extension, loaded via pi.extensions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install-time hook, and the CLI’s default action is to open the package’s setup page. The installer’s key use and configuration writes support the stated setup purpose; the scanner’s process and network findings are consistent with shell installation, browser opening, language-server support, and router validation.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI opens the setup page with no arguments; configuration changes and key validation occur when the user runs an install command. The pi extension registers when loaded by pi.
Impact
No malicious data collection, unauthorized account action, or unrelated code execution was identified.
Mechanism
The installer configures a selected client to use Weave Router and validates the supplied or installed router key. State-change events contain an action and client harness and are sent only to a trusted configured endpoint.
AI rationale
The manifest has no install-time hook, and the CLI’s default action is to open the package’s setup page. The installer’s key use and configuration writes support the stated setup purpose; the scanner’s process and network findings are consistent with shell installation, browser opening, language-server support, and router validation.
Network endpoints2
router.weaveos.com/startrouter.weaveos.com (default router; configurable)
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a router installer and declares no install, preinstall, or postinstall hook.
- The no-argument CLI opens the Weave Router setup page; other arguments run the installer or uninstaller.
- The installer’s state-change event reporter sends only an action and harness to a trusted endpoint resolved from the installed configuration.
- The pi extension registers a router provider and related routing tools when the host loads it.
- Language-server process spawning is exposed through an explicit transport function for language-server connections.
Evidence against
- The package includes network access and reads a router key, but the reviewed installer uses the key with the configured router.
- The CLI and Windows installer use child-process APIs, including for shell installers, browser opening, and language-server processes.
- The scanner flagged credential and host combinations in bundled isomorphic-git dependency files; the reviewed package source does not show those flows being triggered automatically.
Behavioral surface
Source & flagged code
5 flaggedpi-router/src/lsp-client.tsView file
8L9: import { spawn as nodeSpawn, type ChildProcess, type SpawnOptions } from "node:child_process";
L10: import * as path from "node:path";
High
Child Process
Package source references child process execution.
pi-router/src/lsp-client.tsView on unpkg · L8windows.jsView file
1#!/usr/bin/env node
L2: // Native Windows entrypoint. PowerShell users do not need Git Bash, jq, or
L3: // another installation beyond the npx command they already ran.
...
L13:
L14: const defaultBaseUrl = process.env.WEAVE_ROUTER_URL || "https://router.weaveos.com";
L15: const packageName = process.env.WEAVE_ROUTER_NPM_PACKAGE || "@weave-os/router";
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
windows.jsView on unpkg · L1•matchType = previous_version_dangerous_delta
matchedPackage = @weave-os/router@0.2.30
matchedIdentity = npm:QHdlYXZlLW9zL3JvdXRlcg:0.2.30
similarity = 0.925
summary = stored previous version shares package body but lacks this dangerous source file
Findings
4 High4 Medium4 Low
HighChild Processpi-router/src/lsp-client.ts
HighSame File Env Network Executionwindows.js
HighSandbox Evasion Gated Capabilitybin.js
HighPrevious Version Dangerous Deltawindows.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperuninstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @weave-os/router@0.2.31.
See all versions of @weave-os/router for other recorded verdicts.
- Review the evidence and your use of @weave-os/router@0.2.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.