registry / bosia / 0.8.12

bosia@0.8.12

A fast, batteries-included fullstack framework — SSR · Svelte 5 Runes · Bun · ElysiaJS. File-based routing No Node.js, no Vite, no adapters.

AI Security Review

scanned 6h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time malicious behavior is established. A development-only inspector can hand user-entered comments and selected source locations to a configured AI endpoint, and scaffold commands download package-owned registry content.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User enables the inspector in a development config and submits a comment, or explicitly runs `bosia add`/`feat`.

Impact

A configured endpoint receives selected file metadata/comments; explicit scaffold commands can write project files and install declared registry dependencies.

Mechanism

Configured dev-tool AI handoff and registry-based scaffolding.

Rationale

The scanner signals map to declared framework/CLI behavior rather than a concrete malicious chain. The configurable AI handoff is a first-party development extension capability, so it warrants a warning rather than a block.

Evidence

package.jsonsrc/cli/index.tssrc/cli/registry.tssrc/core/dev.tssrc/core/plugin.tssrc/core/plugins/inspector/index.ts

Network endpoints1

raw.githubusercontent.com/bosapi/bosia/main/registry

bosia@0.8.12

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code