LPM Firewall

Threat feed How it works Policy

Loading npm security reports…

midsummer-sol@0.3.34: Clean npm security report (Allow) | LPM Firewall

LPM Firewall

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 7 low-signal pattern(s) reviewed.

View on npm All versions

registry / midsummer-sol / 0.3.34

midsummer-sol@0.3.34

Sol — agent-native version control (a new git). CLI, MCP server, and no-filesystem SDK.

Static Scan Results

scanned 16d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 1.72 MB of source, external domains: 127.0.0.1, auth.midsummer.new, sol.midsummer.new

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

3 Medium4 Low

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

65%Pass

Verdict confidence

Firewall policyNo policy match

Package metadata

npm

Maintainerszanderreichel

Version0.3.68

PublishedJul 1, 2026

LicenseApache-2.0

Dependencies1

Integrityverified

Package size438 KB

Files6

Keywordsvcsgitversion-controlagentmcpno-filesystem

Runtime surface

package.json

Entrypointsmain → ./index.jsexports mapbin → sol, sol-mcp, sol-secret-mcp

Runtimenode >=18

Artifact1.73 MB · 6 files1 signature(s)

Install lifecycleNo scripts declared.

Behavioral surface

ChildProcessCryptoEnvironmentVars

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Filesystem

Network

Shell

HighEntropyStrings

Obfuscated

UrlStrings

Manifest: clean

LPM CLI

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.