@withfudge/design
Installer and agent guidance for the hosted Fudge design-corpus MCP server.
This report shows the evidence for @withfudge/design@2.0.8. 0 of 10 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package sends default runtime telemetry from explicit CLI commands without consistently disclosing it at the point of collection. The events are coarse and go to the package’s own API, so this warrants a warning rather than a malicious verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the login, setup, or doctor command while telemetry is enabled; telemetry is enabled by default outside CI.
Impact
The package reports coarse product usage associated with the authenticated Fudge session; this is an undisclosed runtime telemetry risk.
Mechanism
The CLI sends event data to the Fudge API’s analytics endpoint and includes the Fudge session token in the request headers.
AI rationale
The package sends default runtime telemetry from explicit CLI commands without consistently disclosing it at the point of collection. The events are coarse and go to the package’s own API, so this warrants a warning rather than a malicious verdict.
Evidence
dist/ops/telemetry.jsdist/cli.js
Network endpoints1
api.withfudge.com/analytics/cli/events
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime telemetry is enabled by default for ordinary non-CI use unless disabled by a saved preference or environment setting.
- The login, setup, and doctor commands send telemetry automatically after those commands run.
- Telemetry requests go to the Fudge API and include the Fudge session token plus coarse event, version, platform, and runtime fields.
- The CLI offers telemetry status and disable controls, but login and doctor do not show the user telemetry details when sending events.
Evidence against
- Telemetry events contain coarse product events and runtime fields; the source says they exclude CozoScript, parameters, and result content.
- The telemetry endpoint is part of the package’s own Fudge API, and the CLI provides disable controls.
- Workspace token creation and npm installation occur through explicit workspace commands, not automatically on install or import.
- The manifest has no install, preinstall, or postinstall lifecycle hook.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
4 flaggeddist/ops/auth.jsView file
4import { join } from "node:path";
L5: import { execFile } from "node:child_process";
L6: import { promisify } from "node:util";
High
dist/ops/workspace.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @withfudge/design@2.0.7
matchedIdentity = npm:QHdpdGhmdWRnZS9kZXNpZ24:2.0.7
similarity = 0.615
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/ops/workspace.jsView on unpkg157const child = process.platform === "win32"
L158: ? spawn(process.env.ComSpec || "cmd.exe", ["/d", "/s", "/c", `npm install --save-exact ${name}`], { cwd, stdio: "inherit", windowsHide: true })
L159: : spawn("npm", ["install", "--save-exact", name], { cwd, stdio: "inherit" });
Findings
1 Critical2 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/ops/workspace.js
HighChild Processdist/ops/auth.js
HighRuntime Package Installdist/ops/workspace.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/ops/telemetry.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @withfudge/design@2.0.8.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @withfudge/design@2.0.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.