free-short-video@6.4.7
Free AI short-video generator — run the full free-short-video service locally with one command. Text-to-video, image generation, Edge-TTS narration, subtitles, and compositing, all free. Official site: https://video.lichuanyang.top
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is a transparent, user-invoked launcher for its bundled Python video generator, with no npm lifecycle execution. Its network, environment, and child-process features are aligned with that function and do not establish malicious behavior.
Decision evidence
public snapshot- The user-invoked CLI creates a package-local virtual environment, installs its declared Python requirements, and starts the bundled server.
- package.json has no preinstall, install, postinstall, or other automatic lifecycle hook.
- The CLI defaults to localhost and only forwards an existing Agnes API key to the local server.
- The inspected network and subprocess uses implement the stated video-generation service; no credential harvesting, covert exfiltration, persistence, or remote code-loading path was found.
Source & flagged code
5 flaggedA single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L179Findings
Affected versions and remediation
This report applies to free-short-video@6.4.7.
See all versions of free-short-video for other recorded verdicts.
- Review the evidence and your use of free-short-video@6.4.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.