registry / llm-relay / 0.82.2

llm-relay@0.82.2

⚠ Under review

Retired 2026-09-23; no longer maintained.

Loopback bidirectional Anthropic/OpenAI API proxy with tool-call validation and multi-provider routing.

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 25 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 138 file(s), 1.86 MB of source, external domains: 127.0.0.1, aistudio.google.com, api.anthropic.com, api.cerebras.ai, api.cohere.ai, api.groq.com, api.mistral.ai, api.openai.com, api.sambanova.ai, artificialanalysis.ai, build.nvidia.com, cloud.cerebras.ai, cloud.sambanova.ai, console.anthropic.com, console.groq.com, dashboard.cohere.com, generativelanguage.googleapis.com, gorilla.cs.berkeley.edu, huggingface.co, integrate.api.nvidia.com, ollama.com, openrouter.ai, platform.openai.com, raw.githubusercontent.com, react.dev, registry.npmjs.org, www.w3.org

Source & flagged code

17 flagged

package.jsonView file

Lines 24-64json

24 "skills",

25 "scripts/install-skill.mjs",

26 "scripts/sync-tiers.mjs",

27 "scripts/tier-scoring.mjs",

28 "scripts/tier-scoring.d.mts",

29 "README.md",

30 "LICENSE",

31 "THIRD_PARTY_NOTICES.md",

32 "config.example.json"

33 ],

34 "scripts": {

35 "build": "npm run build:server && npm run build:dashboard",

36 "dev": "tsx src/cli.ts",

37 "start": "node dist/cli.js",

38 "sync:tiers": "node scripts/sync-tiers.mjs",

39 "test": "vitest run",

40 "typecheck": "tsc -p tsconfig.json --noEmit",

41 "typecheck:test": "tsc -p tsconfig.test.json",

42 "check": "npm run typecheck && npm run typecheck:test && npm test && npm run check:dashboard && npm run check:package",

43 "gate": "npm run build && npm run check",

44 "postinstall": "node scripts/install-skill.mjs || node -e \"process.stderr.write('llm-relay: the postinstall hook crashed, so the bundled host skills and Codex setup were NOT fully installed. The package itself is fine. Retry with: node scripts/install-skill.mjs --force\\n')\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L44

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L44

45 "analysis:run": "node scripts/analysis-run.mjs",

46 "prepack": "npm run build",

47 "prepublishOnly": "npm run build && npm run check",

48 "build:server": "node scripts/clean-dist.mjs && tsc -p tsconfig.json && tsc -p tsconfig.json --removeComments --declaration false --declarationMap false",

49 "build:dashboard": "vite build --config dashboard/vite.config.ts",

50 "check:dashboard": "tsc -p dashboard/tsconfig.json --noEmit && vitest run --config dashboard/vitest.config.ts",

51 "check:package": "node scripts/dashboard-package-check.mjs && node scripts/packed-dashboard-smoke.mjs"

52 },

53 "dependencies": {

54 "ajv": "^8.17.1",

55 "llm-bridge": "^2.0.1",

56 "typescript": "^5.7.2"

57 },

58 "devDependencies": {

59 "@eslint/js": "^10.0.1",

60 "@testing-library/jest-dom": "^6.9.1",

61 "@testing-library/react": "^16.3.2",

62 "@testing-library/user-event": "^14.6.5",

63 "@types/node": "^22.10.0",

64 "@types/react": "^19.2.18",

scripts/install-skill.mjsView file

Lines 1-24javascript

1#!/usr/bin/env node

2/**

3 * Install/refresh the llm-relay skill bundle for Claude Code, Codex and OpenCode from the same

4 * shipped source directory, and provision Codex's global provider plus the host-independent MCP

5 * dispatch entry point plus a Codex `relay` subagent file (`~/.codex/agents/relay.toml`) that

6 * pins no model, mirroring `src/setup-claude.ts`'s Claude `relay` agent.

7 *

8 * Runs from npm `postinstall`, but only acts on GLOBAL installs (`npm i -g llm-relay`)

9 * so that a repo-local `npm install` (dev checkout, CI) never touches the developer's

dist/claude-hook.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { relaystatepath } from "./state-paths.js"; import { existssync, mkdirsync, readfilesync, writefilesync } from "node:fs"; import { join } from "node:path"; import { homedir, tmpdir } from "node:os"; export const agent_hook_filename = "llm-relay-agent-offload.mjs"; export function claudehookpaths(home = homedir()) { if (process.env.vitest && home === homedir()) { const vitesthome = join(tmpdir(), "llm-relay-vitest"); return { settings: join(vitesthome, ".claude", "settings.json"), script: join(vitesthome, "hooks", agent_hook_filename), }; } return { settings: join(home, ".claude", "settings.json"),

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/claude-hook.jsView on unpkg

dist/config.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/config.js#virtual:normalized:round1View on unpkg

dist/self-update.jsView file

•matchType = normalized_sha256 matchedPackage = llm-relay@0.57.0 matchedPath = dist/self-update.js matchedIdentity = npm:bGxtLXJlbGF5:0.57.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High