trail-laravel@0.28.2
Self-learning AST context engine & knowledge graph optimized for Laravel codebases and AI coding agents
AI Security Review
scanned 5d ago · by lpm-firewall-aiThis is suspicious under the install-time telemetry rule: the postinstall hook records and flushes telemetry by default without explicit consent. The reviewed event is limited to install/global status and anonymous identifiers, so the source does not support a malicious verdict.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall, except when a gate disables telemetry.
Impact
The package reports installation occurrence and global-versus-local status without an explicit telemetry opt-in; reviewed fields do not contain sensitive machine or project data.
Mechanism
The hook records a per-version install event, then starts a detached process to flush the queue to https://events.nanonets.com/batch/.
AI rationale
This is suspicious under the install-time telemetry rule: the postinstall hook records and flushes telemetry by default without explicit consent. The reviewed event is limited to install/global status and anonymous identifiers, so the source does not support a malicious verdict.
Evidence
scripts/postinstall.mjsdist/telemetry/track.jsdist/telemetry/gate.jsdist/telemetry/contract.jsdist/telemetry/send.jsdist/telemetry/identity.js~/.graft/telemetry.json
Network endpoints1
events.nanonets.com/batch/
Decision evidence
public snapshotAI called this Suspicious at 98.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The npm postinstall hook calls trackInstallIfNew and launches a detached telemetry flush.
- Install telemetry is enabled by default when no user setting exists, although a key, DO_NOT_TRACK, and CI checks can disable it.
- The install event reports whether installation was global; it is emitted once per package version.
- Telemetry is sent in a POST to the package's PostHog ingestion host.
- The install identifier is randomly generated and stored locally.
Evidence against
- The install event is limited to anonymous adoption telemetry; reviewed event fields do not include credentials, hostnames, paths, or project contents.
- Agent configuration writes are performed by the explicit init command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/init/sessions.jsView file
20*/
L21: import { spawnSync } from "node:child_process";
L22: import { closeSync, existsSync, lstatSync, readdirSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/init/sessions.jsView on unpkg · L20Findings
6 High6 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/init/sessions.js
HighShelldist/graph/lsp/registry.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/claude/init.js
HighRuntime Package Installdist/cli-meta.js
HighSemantic Analysis Limiteddist/app/checkout.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/claude/pre-bash.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/vendor/grammars/tree-sitter-go.wasm
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to trail-laravel@0.28.2.
See all versions of trail-laravel for other recorded verdicts.
- Review the evidence and your use of trail-laravel@0.28.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.