registry / autotel-adapters / 2.0.11

autotel-adapters@2.0.11

Framework adapters and composable DX helpers for autotel

AI Security Review

scanned 11d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package runs only when its exported framework wrappers are imported and invoked, delegating telemetry logging to its declared autotel dependencies.

Static reason

One or more suspicious static signals were detected.

Trigger

User application imports and invokes an adapter wrapper.

Impact

No package-owned exfiltration, persistence, installation-time action, or destructive behavior established.

Mechanism

Request tracing and logger-context adapters.

Rationale

Static inspection shows a framework-adapter package that collects request metadata for declared telemetry dependencies only during user-invoked runtime handling. Scanner signals stem from ordinary environment-backed configuration and bundled dependency imports, with no concrete malicious chain.

Evidence

package.jsondist/core.jsdist/integration-CfkaoVmE.jsdist/cloudflare.jsdist/express.jsdist/index.js

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

autotel-adapters@2.0.11

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code