registry / langchain_agentx_stream_ui / 0.2.2

langchain_agentx_stream_ui@0.2.2

React session timeline component library for LangchainAgentEvent SSE streams

AI Security Review

scanned 16d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime network behavior is limited to user-provided SSE URLs and optional diagram rendering to Kroki/configured PlantUML service.

Static reason

No blocking static signals were detected.

Trigger

Application imports and renders library components or creates an SSE/PlantUML source at runtime.

Impact

Expected UI/network behavior; no evidence of unconsented persistence, exfiltration, or install-time mutation.

Mechanism

React UI library parses SSE events and renders timeline/markdown diagrams.

Rationale

Static inspection shows a React component library with expected SSE and optional PlantUML network features, no lifecycle hooks, and no source evidence of credential theft, remote payload execution, persistence, destructive behavior, or AI-agent control hijack. Mark clean despite network primitives because they are runtime, package-aligned, and caller-controlled/configurable.

Evidence

package.jsonREADME.mddist/index.jsdist/chunk-DGC43A5L.jsdist/index.d.tsdist/default.css

Network endpoints4

kroki.iogithub.com/GoodMood2008/langchain_agentx_stream_ui.gitgithub.com/GoodMood2008/langchain_agentx_stream_ui#readmegithub.com/GoodMood2008/langchain_agentx_stream_ui/issues

langchain_agentx_stream_ui@0.2.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code