registry / @withone/cli / 2.0.0
@withone/cli@2.0.0
⚠ Under reviewCLI for managing One
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe inspected CLI source does not substantiate the scanner’s credential-redirection claim. Because the package launches pgserve and that dependency’s source is unavailable in this snapshot, the runtime path remains unresolved.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Starting the embedded Postgres backend when using the memory feature.
Impact
The dependency’s behavior remains unresolved, so this execution path cannot be cleared from the available source.
Mechanism
The backend resolves the installed pgserve wrapper and launches it as a detached child process.
AI rationale
The inspected CLI source does not substantiate the scanner’s credential-redirection claim. Because the package launches pgserve and that dependency’s source is unavailable in this snapshot, the runtime path remains unresolved.
Evidence
package.jsondist/chunk-IMU2X3ZV.js
Decision evidence
public snapshotAI called this Manual Review at 82.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares pgserve as a runtime dependency.
- The embedded Postgres code resolves and launches the pgserve wrapper as a detached child process; its source is absent from the inspected snapshot.
Evidence against
- The reviewed OpenAI embedding path sends its supplied key to the OpenAI embeddings endpoint.
- The package’s prepare script runs the build command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
11 flaggeddist/chunk-IMU2X3ZV.jsView file
1465import { createRequire } from "module";
L1466: import { spawn, spawnSync } from "child_process";
L1467: var requireFromHere = createRequire(import.meta.url);
High
Child Process
Package source references child process execution.
dist/chunk-IMU2X3ZV.jsView on unpkg · L14651773patternName = generic_password
severity = medium
line = 1773
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/chunk-IMU2X3ZV.jsView on unpkg · L17731310if (this.backend) return this.backend;
L1311: const pg = await import("pg").catch((err) => {
L1312: const msg = err instanceof Error ? err.message : String(err);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/chunk-IMU2X3ZV.jsView on unpkg · L1310dist/index.js
Findings
1 Critical5 High6 Medium9 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/chunk-IMU2X3ZV.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Persistencedist/index.js
MediumSecret Patterndist/chunk-IMU2X3ZV.js
MediumDynamic Requiredist/chunk-IMU2X3ZV.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Affected versions and remediation
This report applies to @withone/cli@2.0.0.
See all versions of @withone/cli for other recorded verdicts.
- Review the evidence and your use of @withone/cli@2.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.