bailian-cli-runtime@2.2.0
Runtime framework for bailian-cli (createCli, registry, args, output, pipeline). See https://www.npmjs.com/package/bailian-cli for usage.
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe inspected source shows a CLI runtime entrypoint and an explicit user-defined pipeline code step. The static signals do not establish an automatic trigger or a concrete attack behavior.
Decision evidence
public snapshot- The package exports its runtime bundle as the main entrypoint and describes a CLI runtime framework.
- The bundle executes JavaScript only when a pipeline supplies a `script/js` step with code; this is a user-defined pipeline capability.
Source & flagged code
5 flaggedA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.mjsView on unpkg · L1Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.mjsFindings
Affected versions and remediation
This report applies to bailian-cli-runtime@2.2.0.
See all versions of bailian-cli-runtime for other recorded verdicts.
- Review the evidence and your use of bailian-cli-runtime@2.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.