registry / langchain_agentx_stream_ui / 0.6.2

langchain_agentx_stream_ui@0.6.2

React session timeline component library for LangchainAgentEvent SSE streams

AI Security Review

scanned 5d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime network behavior is limited to consumer-configured SSE streams and optional PlantUML rendering via Kroki.

Static reason

No blocking static signals were detected.

Trigger

A consumer renders the UI with an SSE URL or renders PlantUML content.

Impact

Displays stream events and, for PlantUML rendering, sends diagram source to the configured renderer.

Mechanism

Browser EventSource stream consumption and optional diagram-render POST.

Rationale

Source inspection supports a browser React/SSE visualization library, not install-time or covert attack behavior. The network hints are package-aligned runtime features with explicit caller configuration or documented diagram rendering.

Evidence

package.jsonREADME.mddist/index.jsdist/chunk-4TG4TGIL.jsdist/chunk-ED67MXSG.js

Network endpoints1

kroki.io

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for block

`dist/chunk-ED67MXSG.js` posts rendered PlantUML source to the documented default `https://kroki.io` endpoint.

langchain_agentx_stream_ui@0.6.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code