Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

betterstart-cli@0.0.27: Clean npm security report (Allow) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 10 low-signal pattern(s) reviewed.

View on npm All versions

registry / betterstart-cli / 0.0.27

betterstart-cli@0.0.27

Scaffold a plugin-based Admin into any Next.js 16 application

AI Security Review

scanned 16d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a scaffolding CLI whose risky primitives are user-invoked project generation, dependency installation, optional Vercel provisioning, and local env/config writes.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs the betterstart CLI commands, especially init/add/remove/update/seed.

Impact

Modifies the target Next.js project and may run local tooling when explicitly invoked.

Mechanism

Expected scaffold generator and package-manager/provisioning orchestration

Rationale

Static inspection found no install/import-time execution, hidden exfiltration, persistence, or AI-agent control mutation. The scanner’s credential/network findings correspond to explicit BetterStart/Vercel/Resend/R2 setup flows and generated template examples.

Evidence

package.jsondist/index.jsdist/cli.jsdist/template-reader-X6KFP7B3.jsdist/chunk-M4S53A4X.js

Network endpoints3

vercel.com/dashboard/integrations/checkout/neonui.shadcn.com/schema.jsonbiomejs.dev/schemas/2.3.10/schema.json

Decision evidence

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

dist/cli.js loads user project admin.config.ts via jiti for CLI commands.
dist/cli.js runs child processes for package managers, drizzle-kit, create-next-app, shadcn, tsx seed, and optional vercel CLI.
dist/cli.js writes/removes project files such as admin.config.ts, .env.local, .betterstart snapshots, scaffolded admin files.

Evidence against

package.json has no lifecycle hooks; install does not execute package code.
dist/index.js only exports defineConfig with no side effects.
Network activity is user-invoked and package-aligned: Vercel/Neon/Resend provisioning via vercel CLI; example URLs are templates/placeholders.
Credential-like env vars are prompted/read to write local .env.local or pass to local child processes, not sent to a hidden endpoint.
Destructive removal is exposed as explicit remove/uninstall/--force CLI behavior with prompts or flags.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 380 file(s), 2.02 MB of source, external domains: assets.betterstart.dev, betterstart.io, biomejs.dev, example.com, hooks.example.com, schema.org, ui.shadcn.com, vercel.com, www.w3.org

Source & flagged code

3 flagged · loading source

dist/cli.jsView file

54const options = command.opts(); L55: return typeof options.cwd === "string" ? path2.resolve(options.cwd) : process.cwd(); L56: } ... L224: // core-engine/utils/package-manager.ts L225: import { execFileSync } from "child_process"; L226: import fs3 from "fs"; ... L229: "pnpm-lock.yaml": "pnpm", L230: "package-lock.json": "npm", L231: "yarn.lock": "yarn", ... L246: try { L247: const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8")); L248: if (typeof pkg.packageManager === "string") {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L54

54Trigger-reachable chain: manifest.bin -> dist/cli.js L54: const options = command.opts(); L55: return typeof options.cwd === "string" ? path2.resolve(options.cwd) : process.cwd(); L56: } ... L224: // core-engine/utils/package-manager.ts L225: import { execFileSync } from "child_process"; L226: import fs3 from "fs"; ... L229: "pnpm-lock.yaml": "pnpm", L230: "package-lock.json": "npm", L231: "yarn.lock": "yarn", ... L246: try { L247: const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8")); L248: if (typeof pkg.packageManager === "string") {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L54

39async function loadConfigFile(configPath) { L40: const { createJiti } = await import("jiti"); L41: const alias = {};

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L39

Findings

2 Critical4 Medium4 Low

CriticalCredential Exfiltrationdist/cli.js

CriticalTrigger Reachable Dangerous Capabilitydist/cli.js

MediumDynamic Requiredist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

90%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

AuthorBetterStart

Maintainerspeiris

Version0.0.82

PublishedJul 2, 2026

LicenseMIT

Dependencies7

Integrityverified

Package size813 KB

Files393

Keywordsadminnextjsadmincrudgeneratordrizzleshadcntypescript

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jstypes → ./dist/index.d.tsexports mapbin → betterstart

Runtimenode >=22.0.0

Artifact3.92 MB · 393 files1 signature(s)

Install lifecycleNo install hooks · other: build, check:boundaries, dev, lint +7

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

3 flagged

dist/cli.jsView file

54const options = command.opts(); L55: return typeof options.cwd === "string" ? path2.resolve(options.cwd) : process.cwd(); L56: } ... L224: // core-engine/utils/package-manager.ts L225: import { execFileSync } from "child_process"; L226: import fs3 from "fs"; ... L229: "pnpm-lock.yaml": "pnpm", L230: "package-lock.json": "npm", L231: "yarn.lock": "yarn", ... L246: try { L247: const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8")); L248: if (typeof pkg.packageManager === "string") {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L54

54Trigger-reachable chain: manifest.bin -> dist/cli.js L54: const options = command.opts(); L55: return typeof options.cwd === "string" ? path2.resolve(options.cwd) : process.cwd(); L56: } ... L224: // core-engine/utils/package-manager.ts L225: import { execFileSync } from "child_process"; L226: import fs3 from "fs"; ... L229: "pnpm-lock.yaml": "pnpm", L230: "package-lock.json": "npm", L231: "yarn.lock": "yarn", ... L246: try { L247: const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8")); L248: if (typeof pkg.packageManager === "string") {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L54

39async function loadConfigFile(configPath) { L40: const { createJiti } = await import("jiti"); L41: const alias = {};

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L39