registry / @weave-os/router / 0.2.34
@weave-os/router@0.2.34
One-command installer that points Claude Code, Codex, opencode, or pi at the Weave Router. For pi it also ships the routing extension, loaded via pi.extensions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and its CLI performs setup when explicitly run. Reviewed credential use is directed to the configured router, while the flagged process execution supports language-server transport.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit CLI invocation; pi extension behavior is triggered when a host loads the extension.
Impact
Expected setup and routing behavior for the selected client; no unauthorized credential transfer or other attack behavior was found.
Mechanism
The installer reads or prompts for a router key, contacts the configured router for setup and validation, writes selected client configuration, and can spawn configured language servers.
AI rationale
The package has no install lifecycle hook, and its CLI performs setup when explicitly run. Reviewed credential use is directed to the configured router, while the flagged process execution supports language-server transport.
Evidence
~/.claude/settings.json~/.claude/settings.local.json~/.codex/config.toml~/.config/opencode/opencode.json
Network endpoints2
router.weaveos.comrouter.workweave.ai
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares CLI entry points and a pi extension, with no install, preinstall, or postinstall hook.
- The CLI opens the hosted setup page only when invoked with no arguments; otherwise it runs the installer.
- The installer’s client event reports use the configured router endpoint and a trust gate; the key is sent in a protected header file.
- The off-state event is called from the explicit `off` command path.
- The Windows installer prompts for a Weave Router key or reads its designated environment/config value, then configures the selected client.
- LSP process spawning uses shell:false and is part of the language-server transport.
Evidence against
- The package includes shell and process execution, filesystem writes, and network requests, but these appear tied to explicit installation, configuration, routing, or language-server features.
- The `prepack` script is a packaging-time helper, not an install lifecycle hook.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
5 flaggedpi-router/src/lsp-client.tsView file
8L9: import { spawn as nodeSpawn, type ChildProcess, type SpawnOptions } from "node:child_process";
L10: import * as path from "node:path";
High
Child Process
Package source references child process execution.
pi-router/src/lsp-client.tsView on unpkg · L8windows.jsView file
1#!/usr/bin/env node
L2: // Native Windows entrypoint. PowerShell users do not need Git Bash, jq, or
L3: // another installation beyond the npx command they already ran.
...
L13:
L14: const defaultBaseUrl = process.env.WEAVE_ROUTER_URL || "https://router.weaveos.com";
L15: const packageName = process.env.WEAVE_ROUTER_NPM_PACKAGE || "@weave-os/router";
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
windows.jsView on unpkg · L1•matchType = previous_version_dangerous_delta
matchedPackage = @weave-os/router@0.2.32
matchedIdentity = npm:QHdlYXZlLW9zL3JvdXRlcg:0.2.32
similarity = 0.902
summary = stored previous version shares package body but lacks this dangerous source file
Findings
4 High4 Medium4 Low
HighChild Processpi-router/src/lsp-client.ts
HighSame File Env Network Executionwindows.js
HighSandbox Evasion Gated Capabilitybin.js
HighPrevious Version Dangerous Deltawindows.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperuninstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @weave-os/router@0.2.34.
See all versions of @weave-os/router for other recorded verdicts.
- Review the evidence and your use of @weave-os/router@0.2.34 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.