registry / @withone/cli / 1.55.3
@withone/cli@1.55.3
⚠ Under reviewCLI for managing One
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe inspected source does not support the scanner's credential-redirection claim: OpenAI keys go to the OpenAI API, and custom API keys are requested for a user-entered endpoint. The default runtime dependency pgserve is unresolved, so the package cannot be cleared from this inspection alone.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Using the embedded database backend, which is the configured default.
Impact
The behavior of that runtime dependency could not be assessed from source.
Mechanism
The CLI resolves and launches the pgserve wrapper; its implementation was not available in the inspected package snapshot.
AI rationale
The inspected source does not support the scanner's credential-redirection claim: OpenAI keys go to the OpenAI API, and custom API keys are requested for a user-entered endpoint. The default runtime dependency pgserve is unresolved, so the package cannot be cleared from this inspection alone.
Decision evidence
public snapshotAI called this Manual Review at 83.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json declares pgserve and a prepare script that only runs the build tool.
- The CLI resolves and launches the pgserve wrapper for its embedded database; that dependency's source was unavailable in this snapshot.
- The OpenAI embedding key is sent to api.openai.com only when the configured provider is OpenAI and a key is present.
- The custom API setup asks for a key for the URL the user entered.
Evidence against
- Inspected source does not establish the scanner's claimed fixed unofficial gateway redirect or credential-redirection persistence.
- The prepare hook runs the build tool; the manifest has no preinstall, install, or postinstall hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
10 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @withone/cli@1.53.0
matchedIdentity = npm:QHdpdGhvbmUvY2xp:1.53.0
similarity = 0.750
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg655// src/commands/update.ts
L656: import { spawn } from "child_process";
L657: import { readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
High
758stdio: "ignore",
L759: shell: true
L760: });
High
•
Findings
1 Critical5 High5 Medium9 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Persistencedist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/chunk-WXJWF7QG.js
Affected versions and remediation
This report applies to @withone/cli@1.55.3.
See all versions of @withone/cli for other recorded verdicts.
- Review the evidence and your use of @withone/cli@1.55.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.