registry / inplan / 0.2.2

inplan@0.2.2

⚠ Under review

inplan — a Markdown editor for human ⇄ coding-agent planning. CLI + desktop editor.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 19 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 4 file(s), 2.02 MB of source, external domains: 127.0.0.1, inplan.ai, npmmirror.com, reactjs.org, registry.npmjs.org, us.i.posthog.com, www.w3.org

Source & flagged code

11 flagged

package.jsonView file

Lines 1-35json

2 "name": "inplan",

3 "version": "0.2.2",

4 "description": "inplan — a Markdown editor for human ⇄ coding-agent planning. CLI + desktop editor.",

5 "license": "AGPL-3.0-or-later",

6 "repository": {

7 "type": "git",

8 "url": "git+https://github.com/melly-lgtm/inplan.git"

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L3

9 },

10 "homepage": "https://inplan.ai",

11 "type": "module",

12 "bin": {

13 "inplan": "bin/cli.js"

14 },

15 "files": [

16 "bin",

17 "app",

18 "skill",

19 "LICENSE"

20 ],

21 "engines": {

22 "node": ">= 22.12.0"

23 },

24 "scripts": {

25 "postinstall": "node bin/cli.js install-skill --quiet || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L25

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L25

26 },

27 "dependencies": {

28 "electron": "^43.4.1",

29 "@hocuspocus/provider": "^2.15.3",

30 "@supabase/supabase-js": "^2.45.0",

31 "ws": "^8.18.0",

32 "yjs": "^13.6.31"

33 }

34}

app/main/index.cjsView file

Lines 1-22javascript

1"use strict";

2const electron = require("electron");

3const node_child_process = require("node:child_process");

4const node_crypto

bin/cli.jsView file

Lines 1704-1744javascript

1704 if (user) {

1705 const prof = fromParts({ name: user.name, email: user.email }, "cloud");

1706 if (prof) {

1707 writeLocalProfile(prof);

1708 return

app/renderer/assets/index-Cv94hl_t.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/renderer/assets/index-Cv94hl_t.jsView on unpkg

48331} L48332: if (!pluginMod) pluginMod = await import( L48333: /* @vite-ignore */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/renderer/assets/index-Cv94hl_t.jsView on unpkg · L48331

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/cli.js install-skill --quiet || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

3scripts.postinstall = node bin/cli.js install-skill --quiet || true Install-time code downloads an unverified remote native archive, stages it locally, activates an executable path, and exposes it to process execution. L3: // src/cli.ts L4: import { execFileSync as execFileSync2, spawn as spawn3, spawnSync } from "child_process"; L5: import { createHash as createHash4, randomBytes } from "crypto"; L6: import { createRequire } from "module"; L7: import { appendFileSync as appendFileSync3, copyFileSync, existsSync as existsSync11, mkdirSync as mkdirSync10, readdirSync as readdirSync2, readFileSync as readFileSync11, realpat... L8: import { homedir as homedir7 } from "os"; ... L87: } else if (!inFence) { L88: const trimmed = line.trimStart(); L89: if (trimmed.startsWith(BLOCK_OPEN)) return of

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L3

•scripts.postinstall = node bin/cli.js install-skill --quiet || true

Findings

1 Critical7 High5 Medium6 Low

CriticalAi Agent Control Hijackbin/cli.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processapp/main/index.cjs

HighShellbin/cli.js

HighSame File Env Network Executionbin/cli.js

HighUnverified Remote Native Payload Installpackage.json

HighExternal Ai Agent Control Surface Mutationbin/cli.js

HighSemantic Analysis Limitedapp/renderer/assets/index-Cv94hl_t.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requireapp/renderer/assets/index-Cv94hl_t.js

MediumNetwork

MediumEnvironment Vars

Affected versions and remediation

This report applies to inplan@0.2.2.

See all versions of inplan for other recorded verdicts.

Review the evidence and your use of inplan@0.2.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 18:15:19.048Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.