registry / betterstart-cli / 0.0.22

betterstart-cli@0.0.22

Scaffold a plugin-based Admin into any Next.js 16 application

AI Security Review

scanned 18d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. Risky primitives are tied to a user-invoked Next.js admin scaffolding CLI and optional generated integrations.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs the betterstart CLI command such as init, update-deps, generate, seed, or uninstall.

Impact

Expected project file creation/modification/removal and optional service calls configured by the user; no credential harvesting or covert exfiltration identified.

Mechanism

Project scaffolding, dependency installation, generated integration code, and cleanup commands.

Rationale

Static inspection found a scaffolding CLI with expected file writes, package-manager subprocesses, and optional user-configured integrations, but no lifecycle execution, hidden import-time behavior, credential harvesting, persistence, or covert exfiltration. Scanner credential-exfiltration hints appear to be false positives from generated templates reading documented BETTERSTART_* environment variables and posting to user-configured services.

Evidence

package.jsonREADME.mddist/index.jsdist/cli.jsdist/assets/adapters/next/integrations/resend/actions/resend.tsdist/assets/adapters/next/integrations/mailchimp/actions/mailchimp.tsdist/assets/adapters/next/integrations/r2/actions/r2.tsdist/assets/adapters/next/templates/init/utils/webhook/webhook.tsadmin.config.ts.env.local

betterstart-cli@0.0.22

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code