free-short-video@7.0.4
Free AI short-video generator — run the full free-short-video service locally with one command. Text-to-video, image generation, Edge-TTS narration, subtitles, and compositing, all free. Official site: https://video.lichuanyang.top
AI Security Review
scanned 26d ago · by lpm-firewall-aiSource inspection found a CLI launcher with no package install lifecycle hook. Its child-process and environment use support local Python setup and service startup, with no concrete attack behavior identified.
Decision evidence
public snapshot- package.json exposes the CLI and start command; it declares no install lifecycle hook.
- The CLI creates a virtual environment inside the package and installs its Python requirements when invoked.
- The CLI launches server.py from the package directory as a child process.
- The CLI uses child-process execution and passes through the caller's environment, consistent with its local service launcher function.
Source & flagged code
4 flaggedA single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L179Findings
Affected versions and remediation
This report applies to free-short-video@7.0.4.
See all versions of free-short-video for other recorded verdicts.
- Review the evidence and your use of free-short-video@7.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.