registry / langchain_agentx_stream_ui / 0.2.5

langchain_agentx_stream_ui@0.2.5

React session timeline component library for LangchainAgentEvent SSE streams

AI Security Review

scanned 16d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. Network behavior is runtime UI functionality: caller-configured SSE streams and optional PlantUML rendering.

Static reason

No blocking static signals were detected.

Trigger

Consumer imports package APIs and enables SSE or diagram rendering at runtime.

Impact

No install-time mutation, credential theft, persistence, destructive behavior, or exfiltration chain identified.

Mechanism

User-invoked stream rendering and optional diagram rendering

Rationale

Static source inspection shows a benign LangChain/AgentX React streaming UI package with package-aligned runtime network primitives. There is no concrete malicious behavior or unresolved attack chain.

Evidence

package.jsonREADME.mddist/index.jsdist/chunk-AVSPJ252.js

Network endpoints1

kroki.io

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json has no preinstall/install/postinstall hooks; scripts are build/test/typecheck only.

langchain_agentx_stream_ui@0.2.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code