aiblogwrite@0.2.2
Add an AI-written, SEO-ready blog to your Next.js site with one command: /blog pages on your own domain, a sitemap, and a /blog-admin page to write and schedule posts.
AI Security Review
scanned 14d ago · by lpm-firewall-aiSource review found no concrete attack behavior. The installer is an explicitly invoked CLI flow, and the runtime network and database operations align with the package’s stated blog features.
Decision evidence
public snapshot- package.json exposes a CLI and runtime APIs but defines only a test script; the initializer asks before making its planned changes.
- The runtime reads blog data from the package’s configured AIBlogWrite server. Its default server is the package’s own service.
- Database storage uses the website’s configured database, creates package-specific tables, and accepts sync messages only after signature and site checks.
- The inspected MongoDB, MySQL, and PostgreSQL sources implement database connection, protocol, and authentication functions used by the package’s database feature.
Source & flagged code
4 flaggedThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/aiblogwrite.mjsView on unpkgThe inspected MongoDB, MySQL, and PostgreSQL sources implement database connection, protocol, and authentication functions used by the package’s database feature.
.lpm-dependency-evidence-933ef852-9781-47c5-a3c5-aa401d70c3b3/0/npm-linux/lib/sdam/topology.jsView on unpkg · L32Findings
Affected versions and remediation
This report applies to aiblogwrite@0.2.2.
See all versions of aiblogwrite for other recorded verdicts.
- Review the evidence and your use of aiblogwrite@0.2.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.