mint@4.2.1171
The Mintlify CLI
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package is presented as the Mintlify CLI and its entry point delegates to the declared CLI dependency. No malicious behavior is visible in this package's source; the dependency source was unavailable, which limits the review of delegated behavior.
Static reason
No blocking static signals were detected.
Trigger
Running the mint CLI invokes its declared @mintlify/cli dependency.
Impact
No malicious impact is evident from the available package source.
Mechanism
The package entry point imports and delegates to that dependency; no lifecycle hooks or additional behavior are declared here.
AI rationale
The package is presented as the Mintlify CLI and its entry point delegates to the declared CLI dependency. No malicious behavior is visible in this package's source; the dependency source was unavailable, which limits the review of delegated behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares a CLI entry point, a single @mintlify/cli dependency, and only a manually invoked cleanup script.
- The entry point imports and delegates to the declared CLI dependency; it contains no other behavior.
- The README describes the package as a command-line tool for building and previewing Mintlify apps.
Evidence against
- The source for the @mintlify/cli dependency was unavailable for inspection.
Behavioral surface
Trivial
Source & flagged code
3 flaggedpackage.jsonView file
28"bin": "index.js",
"scripts": {
"clean:all": "rimraf node_modules"
},
"dependencies": {
"@mintlify/cli": "4.0.1774"
},
"devDe
Low
Suspicious Dependency Evidence
The manifest declares a CLI entry point, a single @mintlify/cli dependency, and only a manually invoked cleanup script.
package.jsonView on unpkg · L28index.jsView file
1#!/usr/bin/env node
import { cli as _ } from '@mintlify/cli';
Low
Suspicious Dependency Evidence
The entry point imports and delegates to the declared CLI dependency; it contains no other behavior.
index.jsView on unpkg · L1README.mdView file
35### Installation
```
npm i -g mint
```
Requires Node 20.17 or higher. LTS versions recommended. Node 25+ is not supported.
### Local preview
#### `mint dev`
Run at the root of your Mintlify proje
Findings
4 Low
LowScripts Present
LowSuspicious Dependency Evidencepackage.json
LowSuspicious Dependency Evidenceindex.js
LowAi Review EvidenceREADME.md
Affected versions and remediation
This report applies to mint@4.2.1171.
See all versions of mint for other recorded verdicts.
- Review the evidence and your use of mint@4.2.1171 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.