Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

betterstart-cli@0.0.25: Clean npm security report (Allow) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 10 low-signal pattern(s) reviewed.

View on npm All versions

registry / betterstart-cli / 0.0.25

betterstart-cli@0.0.25

Scaffold a plugin-based Admin into any Next.js 16 application

AI Security Review

scanned 17d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established by source inspection. The package is a user-invoked scaffolding CLI with expected project file writes and dependency/database/Vercel commands.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs betterstart CLI commands such as init, generate, add, seed, update-deps, or uninstall.

Impact

Expected modification of the target Next.js project, not credential exfiltration or persistence.

Mechanism

project scaffolding and optional user-approved dependency/database tooling

Rationale

Scanner findings appear to conflate legitimate CLI scaffolding behavior, environment prompts, and user-invoked child processes with exfiltration. Direct inspection found no install-time execution or concrete attacker-controlled endpoint receiving secrets.

Evidence

package.jsondist/cli.jsdist/index.jsdist/chunk-M4S53A4X.jsdist/template-reader-X6KFP7B3.jsadmin.config.ts.env.local.betterstart/**drizzle.config.tsapp/**src/app/**tsconfig.json

Decision evidence

public snapshot

AI called this at 92.0% confidence with false-positive risk.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Clean

as Benign

low

Evidence for block

Evidence against

package.json has no install/preinstall/postinstall lifecycle hooks; bin is user-invoked ./dist/cli.js.
dist/cli.js is a Next.js admin scaffolding CLI that writes project files, .env.local entries, manifests, and templates only during commands.
Credential-looking prompts in dist/cli.js collect DB/API/admin values for generated project config or child seed scripts, not for outbound exfiltration.
Network/child_process use is package-aligned: package manager installs, drizzle/db push, Vercel/Neon provisioning, browser open, and generated example webhook code.
dist/index.js only exports defineConfig types/helper surface; no import-time side effects observed.
No code found harvesting npm tokens, SSH keys, home directories, or sending env data to an attacker endpoint.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 380 file(s), 2.01 MB of source, external domains: assets.betterstart.dev, betterstart.io, biomejs.dev, example.com, hooks.example.com, schema.org, ui.shadcn.com, vercel.com, www.w3.org

Source & flagged code

3 flagged · loading source

dist/cli.jsView file

54const options = command.opts(); L55: return typeof options.cwd === "string" ? path2.resolve(options.cwd) : process.cwd(); L56: } ... L224: // core-engine/utils/package-manager.ts L225: import { execFileSync } from "child_process"; L226: import fs3 from "fs"; ... L229: "pnpm-lock.yaml": "pnpm", L230: "package-lock.json": "npm", L231: "yarn.lock": "yarn", ... L246: try { L247: const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8")); L248: if (typeof pkg.packageManager === "string") {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L54

54Trigger-reachable chain: manifest.bin -> dist/cli.js L54: const options = command.opts(); L55: return typeof options.cwd === "string" ? path2.resolve(options.cwd) : process.cwd(); L56: } ... L224: // core-engine/utils/package-manager.ts L225: import { execFileSync } from "child_process"; L226: import fs3 from "fs"; ... L229: "pnpm-lock.yaml": "pnpm", L230: "package-lock.json": "npm", L231: "yarn.lock": "yarn", ... L246: try { L247: const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8")); L248: if (typeof pkg.packageManager === "string") {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L54

39async function loadConfigFile(configPath) { L40: const { createJiti } = await import("jiti"); L41: const alias = {};

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L39

Findings

2 Critical4 Medium4 Low

CriticalCredential Exfiltrationdist/cli.js

CriticalTrigger Reachable Dangerous Capabilitydist/cli.js

MediumDynamic Requiredist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

92%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

AuthorBetterStart

Maintainerspeiris

Version0.0.82

PublishedJul 1, 2026

LicenseMIT

Dependencies7

Integrityverified

Package size808 KB

Files393

Keywordsadminnextjsadmincrudgeneratordrizzleshadcntypescript

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jstypes → ./dist/index.d.tsexports mapbin → betterstart

Runtimenode >=22.0.0

Artifact3.90 MB · 393 files1 signature(s)

Install lifecycleNo install hooks · other: build, check:boundaries, dev, lint +7

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

3 flagged

dist/cli.jsView file

54const options = command.opts(); L55: return typeof options.cwd === "string" ? path2.resolve(options.cwd) : process.cwd(); L56: } ... L224: // core-engine/utils/package-manager.ts L225: import { execFileSync } from "child_process"; L226: import fs3 from "fs"; ... L229: "pnpm-lock.yaml": "pnpm", L230: "package-lock.json": "npm", L231: "yarn.lock": "yarn", ... L246: try { L247: const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8")); L248: if (typeof pkg.packageManager === "string") {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L54

54Trigger-reachable chain: manifest.bin -> dist/cli.js L54: const options = command.opts(); L55: return typeof options.cwd === "string" ? path2.resolve(options.cwd) : process.cwd(); L56: } ... L224: // core-engine/utils/package-manager.ts L225: import { execFileSync } from "child_process"; L226: import fs3 from "fs"; ... L229: "pnpm-lock.yaml": "pnpm", L230: "package-lock.json": "npm", L231: "yarn.lock": "yarn", ... L246: try { L247: const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8")); L248: if (typeof pkg.packageManager === "string") {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L54

39async function loadConfigFile(configPath) { L40: const { createJiti } = await import("jiti"); L41: const alias = {};

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L39