prismic@1.19.0
Prismic's official command line tool
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe published package is the Prismic CLI with a user-invoked bin and no registry install lifecycle. Auth and telemetry stay on Prismic or declared analytics hosts and only store the session the user obtains by logging in.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A person or agent runs the prismic binary; nothing runs automatically on npm install of the published package.
Impact
No unconsented credential theft, remote payload, persistence, or agent-config mutation was found.
Mechanism
Commands call Prismic auth, API, docs, and optional telemetry endpoints and write credentials and analytics state under the user config directory.
AI rationale
The published package is the Prismic CLI with a user-invoked bin and no registry install lifecycle. Auth and telemetry stay on Prismic or declared analytics hosts and only store the session the user obtains by logging in.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- prismic@1.19.0 is a command-line tool whose only published entry is the bin script dist/index.mjs. package.json has no preinstall, install, or postinstall hook and no runtime dependency on itself.
- Login and token refresh use the caller host, defaulting to prismic.io, at https://auth.${host}/ and the dashboard CLI login page. The session cookie is written only to the user config credentials.json after an explicit login command.
Evidence against
- A local HTTP listener on port 5555 and Segment/Sentry calls run only when the CLI is invoked, and telemetry can be turned off in .prismicrc.
- Child-process use is limited to a detached token-refresh helper and package-manager install helpers for project scaffolding.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
4 flaggedpackage.jsonView file
•name = prismic; similarTo = prisma
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgdist/core-BqdIMSmY.mjsView file
7`))&&!t?.force?e:xt(e)+`
L8: `}function X(e,t){return St(t)+e}const Ct=`https://prismic.io/docs/slices`,wt={UID:`https://prismic.io/docs/fields/uid`,Boolean:`https://prismic.io/docs/fields/boolean`,Color:`http...
L9: /**
...
L166: }
L167: `,r)}return r}var jn=L(import.meta.url);function Mn(e){let t=j(e);return t.length>1&&t[t.length-1]===F&&(t=t.substring(0,t.length-1)),t}const Nn=/[\\/]/g;function Pn(e,t){return e....
L168: `),l=null;for(let e of c){let t=e.match(/^(\s+)\S+/);if(t){let e=t[1].length;l=l?Math.min(l,e):e}}if(l!==null){let e=l;s=c.map(t=>t[0]===` `||t[0]===` `?t.slice(e):t).join(`
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/core-BqdIMSmY.mjsView on unpkg · L7dist/auth-CAs_QGT_.mjsView file
Findings
2 High4 Medium7 Low
HighSandbox Evasion Gated Capabilitydist/auth-CAs_QGT_.mjs
HighPrevious Version Dangerous Deltadist/auth-CAs_QGT_.mjs
MediumTyposquat Namepackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowWeak Cryptodist/core-BqdIMSmY.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to prismic@1.19.0.
See all versions of prismic for other recorded verdicts.
- Review the evidence and your use of prismic@1.19.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.