registry / hexo-deployer-wrangler / 1.0.5

hexo-deployer-wrangler@1.0.5

Hexo deployer plugin for Cloudflare Pages via Wrangler CLI (v3+)

AI Security Review

scanned 12d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package performs a user-invoked Hexo deployment through its declared Wrangler dependency.

Static reason

No blocking static signals were detected.

Trigger

User runs Hexo deploy with type "wrangler".

Impact

Deploys the configured site or Worker under the user's Cloudflare credentials.

Mechanism

Builds Wrangler deploy arguments and launches the local Wrangler CLI.

Rationale

Source inspection found no install-time execution, credential exfiltration, persistence, destructive behavior, or remote payload loading. Environment and local-token access are limited to authentication validation for the explicitly invoked Cloudflare deployment.

Evidence

package.jsonindex.jsREADME.mdwrangler.toml.wrangler/config/default.tomlnode_modules/wrangler/bin/wrangler.js

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

No lifecycle scripts are declared in package.json.
Deployment is registered as Hexo's explicit "wrangler" deployer.

hexo-deployer-wrangler@1.0.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code