lightbase-edge@0.1.9
Superseded — use 0.1.15 (the maintained 0.1.1 line with the framework-prep fix).
The one-liner: full-Node SSR on Cloudflare Pages with ZERO Cloudflare Workers. Drop into any codebase — bundles your server, publishes it to your own Pages CDN, registers a sha-pinned auto-deploy manifest with Lightbase, and generates the preflight-free z
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe inspected source shows a CLI deployment workflow that sends credentials and a manifest to the configured Lightbase service. The scanner signals are consistent with that functionality; no concrete malicious behavior was established.
Decision evidence
public snapshot- package.json identifies a CLI for Lightbase and Cloudflare Pages deployment.
- cli.mjs dispatches commands from the explicit CLI argument, defaulting to deploy.
- Deploy sends the manifest and token to the configured Lightbase URL; no unrelated recipient is shown.
- Deployment requires a project configuration and uses supplied Lightbase credentials.
Source & flagged code
6 flaggedPackage metadata claims a different repository identity while copied source loads a runtime dependency bridge.
cli.mjsView on unpkg · L143cli.mjs dispatches commands from the explicit CLI argument, defaulting to deploy.
cli.mjsView on unpkg · L1887Findings
Affected versions and remediation
This report applies to lightbase-edge@0.1.9.
See all versions of lightbase-edge for other recorded verdicts.
- Review the evidence and your use of lightbase-edge@0.1.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.