aiblogwrite@0.3.0
Add an AI-written, SEO-ready blog to your Next.js site with one command: /blog pages on your own domain, a sitemap, and a /blog-admin page to write and schedule posts.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package automatically sends visitor view and CTA activity to URLs supplied by AIBlogWrite, but its README does not disclose this tracking or offer a way to disable it. This warrants a warning; the reviewed code does not show credential theft or unrelated malicious behavior.
Decision evidence
public snapshot- Blog post rendering automatically loads an API-supplied 1×1 image URL to count views on the AIBlogWrite dashboard.
- A component sends a request to an API-supplied click URL when a reader activates a post CTA.
- The README describes the blog and dashboard but does not disclose visitor view or CTA click tracking.
- The tracking code is limited to post views and CTA activations; no credential or environment-variable collection is shown.
- The CLI writes project files only after showing its plan and asking to proceed.
- The package manifest has no install lifecycle scripts.
Source & flagged code
4 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/aiblogwrite.mjs#virtual:normalized:round1View on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/aiblogwrite.mjsView on unpkgFindings
Affected versions and remediation
This report applies to aiblogwrite@0.3.0.
See all versions of aiblogwrite for other recorded verdicts.
- Review the evidence and your use of aiblogwrite@0.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.