registry / @windmill-labs/components / 1.754.1
@windmill-labs/components@1.754.1
The Windmill frontend written in Svelte 5 + Tailwind CSS
AI Security Review
scanned 4mo ago · by lpm-firewall-aiThe scanner's lifecycle signal is a false positive: the guarded postinstall target is absent and excluded from the published file list. Inspected packaged code contains expected UI, API, and AI integration behavior without a concrete malicious chain.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm postinstall evaluates a missing-file guard; normal runtime network actions require component or user workflow invocation.
Impact
No observed filesystem mutation, payload execution, credential exfiltration, persistence, or destructive action.
Mechanism
Guarded absent install helper; user-driven frontend API and AI client requests.
AI rationale
The scanner's lifecycle signal is a false positive: the guarded postinstall target is absent and excluded from the published file list. Inspected packaged code contains expected UI, API, and AI integration behavior without a concrete malicious chain.
Evidence
package.jsonpackage/script_helpers.jspackage/components/copilot/chat/anthropic.jspackage/components/copilot/chat/api/apiTools.jspackage/components/copilot/chat/script/core.js
Network endpoints2
registry.npmjs.org/-/v1/searchunpkg.com/${r.package.name}/readme.md
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a guarded postinstall command.
- The postinstall command references child_process only if ./scripts/untar_ui_builder.js exists.
Evidence against
- ./scripts/untar_ui_builder.js is absent from the extracted package.
- package.json publishes only dist and package; no scripts directory is shipped.
- No non-test packaged source imports child_process or node:fs for host access.
- Network code is component functionality: configured AI/API calls and explicit integration/package-search actions.
- No credential harvesting, shell execution, persistence, destructive behavior, or agent-control-surface writes found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.postinstall = node -e "if (require('fs').existsSync('./scripts/untar_ui_builder.js')) { require('child_process').execSync('node ./scripts/untar_ui_builder.js', {stdio: 'inherit'}) }"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "if (require('fs').existsSync('./scripts/untar_ui_builder.js')) { require('child_process').execSync('node ./scripts/untar_ui_builder.js', {stdio: 'inherit'}) }"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgpackage.json#scripts.postinstallView file
1if (require('fs').existsSync('./scripts/untar_ui_builder.js')) { require('child_process').execSync('node ./scripts/untar_ui_builder.js', {stdio: 'inherit'}) }
Findings
1 Critical2 High5 Medium6 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighEntrypoint Build Divergencepackage/script_helpers.js
MediumDynamic Requirepackage.json#scripts.postinstall
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperpackage/components/copilot/prompts/yaml2json.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License
Affected versions and remediation
This report applies to @windmill-labs/components@1.754.1.
See all versions of @windmill-labs/components for other recorded verdicts.
- Review the evidence and your use of @windmill-labs/components@1.754.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.