autotel-subscribers@59.1.1
Write Once, Observe Anywhere - Event subscribers for autotel (Mixpanel, Amplitude, Segment, Slack, webhooks, Loki, file)
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the required dependency snapshot shows a local redaction helper. Runtime network operations occur through configured event subscribers, with no source evidence of covert collection or delivery to an unrelated recipient.
Decision evidence
public snapshot- package.json points to a distribution entrypoint and contains only build, development, lint, type-check, and test scripts; it has no install lifecycle hook.
- The declared slow-redact dependency has no lifecycle scripts and its inspected source exports a local redaction helper without network, process, or dynamic-code execution matches.
- Runtime subscribers send events through configured provider credentials, webhook URLs, or Loki endpoints; the package does not select a fixed unrelated recipient.
- The PostHog compatibility export throws an error directing callers to the replacement package; it does not perform network activity.
- Runtime code includes outbound requests and environment-variable reads, but the inspected sinks deliver event data to configured provider or webhook destinations.
Source & flagged code
5 flagged · loading sourcepackage.json points to a distribution entrypoint and contains only build, development, lint, type-check, and test scripts; it has no install lifecycle hook.
package.jsonView on unpkg · L5package.json points to a distribution entrypoint and contains only build, development, lint, type-check, and test scripts; it has no install lifecycle hook.
package.jsonView on unpkg · L153Findings
Affected versions and remediation
This report applies to autotel-subscribers@59.1.1.
See all versions of autotel-subscribers for other recorded verdicts.
- Review the evidence and your use of autotel-subscribers@59.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.