Loading npm security reports…

midsummer-sol@0.3.33: Clean npm security report (Allow) | LPM Firewall

registry / midsummer-sol / 0.3.33

midsummer-sol@0.3.33

Sol — agent-native version control (a new git). CLI, MCP server, and no-filesystem SDK.

AI Security Review

scanned 16d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. Risky primitives are aligned with an agent-native VCS and secret-management CLI/MCP server and require explicit user/runtime invocation.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs sol CLI or starts sol-mcp/sol-secret-mcp.

Impact

Legitimate repo state changes, credential cache, remote sync, or secret sealing/export when requested.

Mechanism

user-invoked VCS, remote sync, auth, and secret-management operations

Rationale

Static inspection did not find install-time execution, covert exfiltration, persistence, destructive behavior, or unconsented AI-agent control-surface mutation. The added secret MCP file implements package-described secret management with bearer-gated HTTP mode and explicit refusal of agent secret value read/write tools.

Evidence

package.jsonindex.jssol.jssol-mcp.jssol-secret-mcp.jsREADME.md.sol/**~/.sol/credentials~/.sol/identity.json~/.sol/verified-keys.json

Network endpoints3

sol.midsummer.newauth.midsummer.new127.0.0.1:8765/mcp

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no lifecycle scripts; execution is via main export or sol/sol-mcp/sol-secret-mcp bins.
index.js exports SDK symbols only; no import-time network, filesystem mutation, or process execution found.
sol.js CLI network calls target package-aligned remotes https://sol.midsummer.new and https://auth.midsummer.new during auth/remote commands.
sol-mcp.js exposes VCS MCP tools that write to Sol workspace state, not unconsented agent control files.
sol-secret-mcp.js refuses open HTTP MCP without bearer token and blocks secret value input/output tools for agents.
Secret/key file reads and writes are user-invoked Sol storage paths for .sol and ~/.sol functionality.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

Source & flagged code

1 flagged

sol-secret-mcp.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = midsummer-sol@0.3.32 matchedIdentity = npm:bWlkc3VtbWVyLXNvbA:0.3.32 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

sol-secret-mcp.jsView on unpkg

Source & flagged code

1 flagged · loading source

sol-secret-mcp.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

sol-secret-mcp.jsView on unpkg

Findings

1 Critical3 Medium4 Low

CriticalPrevious Version Dangerous Deltasol-secret-mcp.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings