registry / @workweave/router / 0.2.34
@workweave/router@0.2.34
One-command installer that points Claude Code, Codex, opencode, or pi at the Weave Router. For pi it also ships the routing extension, loaded via pi.extensions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe reviewed network and process behavior matches the package’s stated purpose: configuring coding clients to use Weave Router and spawning language servers for pi. The credential flow uses a Weave Router key with the selected router endpoint, and no install-time lifecycle hook or unrelated default credential collection was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI installer runs when a user invokes it; routing occurs when a configured client makes requests.
Impact
Requests from configured clients are routed through the endpoint selected by the user or the package’s default router.
Mechanism
The installer stores router settings and a router key in client configuration. The desktop shim forwards matching API requests to the configured router.
AI rationale
The reviewed network and process behavior matches the package’s stated purpose: configuring coding clients to use Weave Router and spawning language servers for pi. The credential flow uses a Weave Router key with the selected router endpoint, and no install-time lifecycle hook or unrelated default credential collection was found.
Network endpoints2
router.weaveos.comapi.anthropic.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as an installer for routing supported coding clients through Weave Router.
- The CLI invokes the installer or uninstaller in response to user-supplied command arguments; the manifest declares no install lifecycle hook.
- The Windows installer obtains a Weave Router key from the environment, existing client config, or an interactive prompt, then validates it against the configured router URL.
- The pi extension registers routing and language-server features for pi; language-server processes are spawned with shell disabled.
- The desktop shim forwards matching Claude Desktop API requests to the configured router and adds the router key only for those requests.
Evidence against
- The manifest’s only script is prepack, a packaging-time script.
- The inspected installer and extension behavior aligns with the package’s stated routing and setup purpose.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggedpi-router/src/lsp-client.tsView file
8L9: import { spawn as nodeSpawn, type ChildProcess, type SpawnOptions } from "node:child_process";
L10: import * as path from "node:path";
High
Child Process
Package source references child process execution.
pi-router/src/lsp-client.tsView on unpkg · L8windows.jsView file
1#!/usr/bin/env node
L2: // Native Windows entrypoint. PowerShell users do not need Git Bash, jq, or
L3: // another installation beyond the npx command they already ran.
...
L13:
L14: const defaultBaseUrl = process.env.WEAVE_ROUTER_URL || "https://router.weaveos.com";
L15: const packageName = process.env.WEAVE_ROUTER_NPM_PACKAGE || "@weave-os/router";
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
windows.jsView on unpkg · L1•matchType = previous_version_dangerous_delta
matchedPackage = @workweave/router@0.2.32
matchedIdentity = npm:QHdvcmt3ZWF2ZS9yb3V0ZXI:0.2.32
similarity = 0.902
summary = stored previous version shares package body but lacks this dangerous source file
Findings
4 High4 Medium4 Low
HighChild Processpi-router/src/lsp-client.ts
HighSame File Env Network Executionwindows.js
HighSandbox Evasion Gated Capabilitybin.js
HighPrevious Version Dangerous Deltawindows.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperuninstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @workweave/router@0.2.34.
See all versions of @workweave/router for other recorded verdicts.
- Review the evidence and your use of @workweave/router@0.2.34 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.