LPM Firewall

Threat feed How it works Policy

Loading npm security reports…

LPM Firewall

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 5 low-signal pattern(s) reviewed.

View on npm All versions

registry / autotel-web / 1.12.6

autotel-web@1.12.6

Ultra-lightweight browser SDK for distributed tracing - propagates W3C traceparent headers to backends using Autotel (~2-5KB gzipped)

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Network

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 52.9 KB of source, external domains: api.example.com, github.com

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 Medium4 Low

MediumNetwork

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Low

Scripts Present

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

65%Pass

Verdict confidence

Firewall policyNo policy match

Package metadata

npm

AuthorJag Reehal

Maintainersjagreehal

Version1.12.6

PublishedJul 13, 2026

LicenseApache-2.0

Dependencies11

Integrityverified

Package size70.1 KB

Files16

Keywordsopentelemetryotelbrowserwebdistributed-tracingw3c-trace-contexttraceparentobservability

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jstypes → ./dist/index.d.tsexports map

Runtime

LPM CLI

No engine / OS / CPU constraints

Artifact240 KB · 16 files1 signature(s) · provenance

Install lifecycleNo install hooks · other: build, clean, dev, lint +4

Behavioral surface

NetworkHighEntropyStringsTelemetryUrlStringsManifest: clean

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

autotel-web: Clean npm security report (Allow) | LPM Firewall