@wix/create-app
Create Wix apps
This report shows the evidence for @wix/create-app@0.0.282. 0 of 39 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest exposes a CLI without install lifecycle hooks, and the flagged npm credential flow scopes authentication to the configured package registry for metadata requests. The other reviewed endpoints are Wix service hosts used by the CLI; the scanner indicators did not establish malicious behavior.
Decision evidence
public snapshot- The package exposes bin/index.cjs as its CLI entrypoint, which imports the bundled application.
- npm authentication is selected for the configured npm registry and used to request package metadata from that registry.
- The bundled HTTP client uses Wix service hosts for Wix CLI requests.
Source & flagged code
8 flaggedPackage source references child process execution.
build/chunk-YGS3SFYI.jsView on unpkg · L2405Package source references dynamic code evaluation.
build/generator-4JVKCICT.jsView on unpkg · L1123Findings
Affected versions and remediation
This report applies to @wix/create-app@0.0.282.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @wix/create-app@0.0.282 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.