registry / bosia / 0.8.9

bosia@0.8.9

A fast, batteries-included fullstack framework — SSR · Svelte 5 Runes · Bun · ElysiaJS. File-based routing No Node.js, no Vite, no adapters.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Explicit registry-install commands fetch mutable upstream content, write it into the current project, and can install declared dependencies. Registry paths are not visibly constrained before filesystem joins.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `bosia add`, `bosia feat`, or `bosia create`.

Impact

A compromised registry could stage arbitrary project changes or dependency installation; no install-time package attack is present.

Mechanism

Remote registry payload download and project-file/dependency mutation.

Rationale

No concrete malicious behavior was found after source inspection, but unpinned remote registry payloads can mutate projects and install dependencies without visible path constraints. Downgrade to a warning for the unresolved staged-payload/supply-chain risk.

Evidence

package.jsonsrc/cli/add.tssrc/cli/feat.tssrc/cli/registry.tssrc/cli/create.tssrc/core/plugins/inspector/index.tssrc/lib/components/<registry path>.env<project files selected by feature metadata>

Network endpoints2

raw.githubusercontent.com/bosapi/bosia/main/registrygithub.com/bosapi/bosia/releases/download/

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Critical Vulnerability with medium false-positive risk.

Evidence for warning

`src/cli/add.ts` fetches mutable registry content from GitHub.
`src/cli/add.ts` joins registry-supplied paths/files without visible traversal validation.
`src/cli/registry.ts` writes fetched files and runs `bun add` for registry-supplied dependencies.
`src/cli/feat.ts` applies remote feature file mutations to the user project.

Evidence against

`package.json` has no preinstall/install/postinstall lifecycle hooks.
Network and writes occur only after explicit `create`, `add`, or `feat` CLI commands.
No credential harvesting, secret exfiltration, hidden persistence, or AI-agent config writes found.
`src/core/plugins/inspector/index.ts` posts only to an explicitly configured dev AI endpoint.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 93 file(s), 451 KB of source, external domains: fonts.googleapis.com, github.com, raw.githubusercontent.com

Source & flagged code

4 flagged

src/core/dev.tsView file

Lines 106-146typescript

106</head>

107<body>

108 <div class="wrap"><h1><span class="dot"></span>App server is starting…</h1></div>

109 <script>

110 !function r(){

111 try{

112 var e=new EventSource("/__bosia/sse");

113 e.addEventListener("reload",function(){location.reload()});

114 e.onerror=function(){e.close();setTimeout(r,2000)};

115 }catch(_){setTimeout(r,2000)}

116 }();

117 </script>

118</body>

119</html>`;

120

121// ─── Build ────────────────────────────────────────────────

122

123const BUILD_SCRIPT = join(import.meta.dir, "build.ts");

124

125async function runBuild(): Promise<boolean> {

126 console.log("🏗️ Building...");

127 const proc = spawn(["bun", "run", BUILD_SCRIPT], {

128 stdout: "inherit",

High

Child Process

Package source references child process execution.

src/core/dev.tsView on unpkg · L126

129 stderr: "inherit",

130 cwd: process.cwd(),

131 env: { ...process.env, BOSIA_OUT_DIR: DEV_OUT_DIR },

132 });

133 return (await proc.exited) === 0;

134}

135

136// ─── Ports ────────────────────────────────────────────────

137

138const DEV_PORT = Number(process.env.PORT) || 9000;

139const APP_PORT = DEV_PORT + 1; // internal, hidden from user

140

141// A previous dev session's app-server child can outlive its parent: an unclean

142// stop (SIGKILL, IDE stop button, crash) skips graceful cleanup, or a shutdown

143// slower than the SIGTERM grace window orphans it. The orphan keeps APP_PORT

144// bound and answers the new proxy with bundle hashes that no longer exist on

145// disk → "ENOENT reading +page-<hash>.js" 500s. Reap whatever is listening on

146// APP_PORT before we spawn, so a stale child can never shadow the fresh build.

src/core/plugin.tsView file

Lines 1-33typescript

1import { join, dirname } from "path";

3import { resolveImportPath } from "./resolveImport.ts";

5// ─── Bun Build Plugin ─────────────────────────────────────

6// Resolves:

7// bosia:routes → .bosia/routes.ts (generated route map)

8// $env → .bosia/env.server.ts (bun) or .bosia/env.client.ts (browser)

9// $* → resolved dynamically via tsconfig.json compilerOptions.paths

src/cli/registry.tsView file

Lines 164-204typescript

164 }

165 }

166

167 if (changes.scripts && Object.keys(changes.scripts).length > 0) {

168 pkg.scripts = pkg.scripts ?? {};

169 for (const [key, val] of

src/cli/create.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = bosia@0.8.8 matchedIdentity = npm:Ym9zaWE:0.8.8 similarity = 0.989 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli/create.tsView on unpkg

Source & flagged code

4 flagged · loading source

src/core/dev.tsView file

126console.log("🏗️ Building..."); L127: const proc = spawn(["bun", "run", BUILD_SCRIPT], { L128: stdout: "inherit",

High

Child Process

Package source references child process execution.

src/core/dev.tsView on unpkg · L126

src/core/plugin.tsView file

13name: "bosia-resolver", L14: setup(build: import("bun").PluginBuilder) { L15: // bosia:routes → .bosia/routes.client.ts (browser) or .bosia/routes.ts (server)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/core/plugin.tsView on unpkg · L13

src/cli/registry.tsView file

184L185: /** Run `bun add` for deps and optionally `bun add --dev` for devDeps. */ L186: export async function bunAdd( ... L193: console.log(`\n📥 npm: ${packages.join(", ")}`); L194: const proc = spawn(["bun", "add", ...packages], { L195: stdout: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/cli/registry.tsView on unpkg · L184

src/cli/create.tsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli/create.tsView on unpkg

Findings

1 Critical3 High5 Medium4 Low

CriticalPrevious Version Dangerous Deltasrc/cli/create.ts

HighChild Processsrc/core/dev.ts

HighShell

HighRuntime Package Installsrc/cli/registry.ts

MediumDynamic Requiresrc/core/plugin.ts

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

src/core/dev.tsView file

Lines 106-146typescript

106</head>

107<body>

108 <div class="wrap"><h1><span class="dot"></span>App server is starting…</h1></div>

109 <script>

110 !function r(){

111 try{

112 var e=new EventSource("/__bosia/sse");

113 e.addEventListener("reload",function(){location.reload()});

114 e.onerror=function(){e.close();setTimeout(r,2000)};

115 }catch(_){setTimeout(r,2000)}

116 }();

117 </script>

118</body>

119</html>`;

120

121// ─── Build ────────────────────────────────────────────────

122

123const BUILD_SCRIPT = join(import.meta.dir, "build.ts");

124

125async function runBuild(): Promise<boolean> {

126 console.log("🏗️ Building...");

127 const proc = spawn(["bun", "run", BUILD_SCRIPT], {

128 stdout: "inherit",

High

Child Process

Package source references child process execution.

src/core/dev.tsView on unpkg · L126

129 stderr: "inherit",

130 cwd: process.cwd(),

131 env: { ...process.env, BOSIA_OUT_DIR: DEV_OUT_DIR },

132 });

133 return (await proc.exited) === 0;

134}

135

136// ─── Ports ────────────────────────────────────────────────

137

138const DEV_PORT = Number(process.env.PORT) || 9000;

139const APP_PORT = DEV_PORT + 1; // internal, hidden from user

140

141// A previous dev session's app-server child can outlive its parent: an unclean

142// stop (SIGKILL, IDE stop button, crash) skips graceful cleanup, or a shutdown

143// slower than the SIGTERM grace window orphans it. The orphan keeps APP_PORT

144// bound and answers the new proxy with bundle hashes that no longer exist on

145// disk → "ENOENT reading +page-<hash>.js" 500s. Reap whatever is listening on

146// APP_PORT before we spawn, so a stale child can never shadow the fresh build.

src/core/plugin.tsView file

Lines 1-33typescript

1import { join, dirname } from "path";

3import { resolveImportPath } from "./resolveImport.ts";

5// ─── Bun Build Plugin ─────────────────────────────────────

6// Resolves:

7// bosia:routes → .bosia/routes.ts (generated route map)

8// $env → .bosia/env.server.ts (bun) or .bosia/env.client.ts (browser)

9// $* → resolved dynamically via tsconfig.json compilerOptions.paths

src/cli/registry.tsView file

Lines 164-204typescript

164 }

165 }

166

167 if (changes.scripts && Object.keys(changes.scripts).length > 0) {

168 pkg.scripts = pkg.scripts ?? {};

169 for (const [key, val] of

src/cli/create.tsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli/create.tsView on unpkg