registry / langchain_agentx_stream_ui / 0.5.0

langchain_agentx_stream_ui@0.5.0

React session timeline component library for LangchainAgentEvent SSE streams

AI Security Review

scanned 5d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime networking is UI-aligned: caller-configured SSE consumption and PlantUML rendering to the documented default service.

Static reason

No blocking static signals were detected.

Trigger

A consumer imports and uses the UI, starts `createAgentxSseSource`, or renders PlantUML content.

Impact

PlantUML diagram text may be sent to the configured renderer; no stealth, install-time, credential, persistence, or destructive behavior is present.

Mechanism

Caller-supplied SSE connection and client-side PlantUML render request.

Rationale

Static inspection supports a benign React SSE timeline library. Its network behavior is documented and user/component-triggered, with no concrete malicious chain.

Evidence

package.jsonREADME.mddist/index.jsdist/chunk-ME5T6YSV.js

Network endpoints1

kroki.io

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for block

`dist/chunk-ME5T6YSV.js` POSTs PlantUML source to the documented default renderer when that UI component renders.

langchain_agentx_stream_ui@0.5.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code