ts-prorm-orm@4.7.1

⚠ Under review

A TypeScript ORM for MySQL, PostgreSQL, SQLite, MSSQL, and more

AI Security Review

scanned 23h ago · by lpm-firewall-ai

Inspected source resolves the flagged credential transfer and dynamic loading matches to ordinary, caller-driven behavior. Full clean certification is not possible because the required citation set exceeds the schema limit, so this needs manual review rather than a malicious verdict.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

No automatic attack trigger was confirmed; the inspected transfer and query helpers require an explicit caller action.

Impact

No unauthorized credential transfer or other attack impact was established from these paths.

Mechanism

The upload helper streams the supplied file to its supplied URL. The passwordless command sends a short-lived, scoped signed grant and query to the configured API.

AI rationale

Decision evidence

public snapshot

AI called this Manual Review at 77.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest sets `prepare` to `husky` and `prepublishOnly` to build, package checks, and tests; the flagged CLI helpers are not install hooks.
The flagged upload helper streams a caller-supplied file to a caller-supplied URL; its source does not read credentials.
The flagged `schema-types.js` match is a static relative `require` of `schema-objects`.
The passwordless command reads a local session file, signs a grant scoped to one operation and table, and sends that grant to the configured API; the secret itself is not in the request body.

Evidence against

The scanner’s credential-exfiltration label is not supported by the inspected upload helper or passwordless request path.
The requested clean citation set exceeds the 256-citation limit, so the required clean coverage cannot be provided.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

Source & flagged code

3 flagged

dist/schema-types.jsView file

Lines 11-51javascript

11 * actually need — adding a value to a live enum.

12 *

13 * Values reaching SQL here are literals, not identifiers: an enum's members, a

14 * comment's text, a domain's default. Each goes through {@link quoteLiteral}

15 * rather than being interpolated.

16 */

17Object.defineProperty(exports, "__esModule", { value: true });

18exports.quoteLiteral = quoteLiteral;

19exports.buildCreateExtensionSQL = buildCreateExtensionSQL;

20exports.buildDropExtensionSQL = buildDropExtensionSQL;

21exports.buildCreateEnumSQL = buildCreateEnumSQL;

22exports.buildAddEnumValueSQL = buildAddEnumValueSQL;

23exports.buildRenameEnumValueSQL = buildRenameEnumValueSQL;

24exports.buildDropEnumSQL = buildDropEnumSQL;

25exports.buildCreateDomainSQL = buildCreateDomainSQL;

26exports.buildDropDomainSQL = buildDropDomainSQL;

27exports.buildCommentOnTableSQL = buildCommentOnTableSQL;

28exports.buildCommentOnColumnSQL = buildCommentOnColumnSQL;

29exports.buildSetSequenceValueSQL = buildSetSequenceValueSQL;

30exports.buildRestartSequenceSQL = buildRestartSequenceSQL;

31exports.buildNextSequenceValueSQL = buildNextSequenceValueSQL;

32const schema_objects_1 = require("./schema-objects");

33/**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/schema-types.jsView on unpkg · L31

34 * Quote a SQL string literal.

35 *

36 * Doubling the quote is the portable escape and the only one needed here —

37 * these are DDL statements, so nothing can be bound as a parameter.

38 */

39function quoteLiteral(value) {

40 return `'${String(value).replace(/'/g, "''")}'`;

41}

42/**

43 * Install a database extension.

44 *

45 * ```ts

46 * await qi.createExtension('uuid-ossp');

47 * await qi.createExtension('postgis', { cascade: true });

48 * ```

49 *

50 * Extension names are quoted, which matters more than it looks: `uuid-ossp`

51 * contains a hyphen and is a syntax error unquoted.

dist/cli/core/io.jsView file

Lines 50-90javascript

50const framework_1 = require("./framework");

51const prompt_1 = require("./prompt");

52// ─── Overwrite protection ──────────────────────────────────────────────────────

53/**

dist/compliance/backup-verification.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 61

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/compliance/backup-verification.js#virtual:normalized:round1View on unpkg

Source & flagged code

3 flagged · loading source

dist/schema-types.jsView file

31exports.buildNextSequenceValueSQL = buildNextSequenceValueSQL; L32: const schema_objects_1 = require("./schema-objects"); L33: /**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/schema-types.jsView on unpkg · L31

dist/cli/core/io.jsView file

70const stream = fs.createReadStream(filePath); L71: const res = await fetch(url, { L72: method: 'PUT', L73: // Node's fetch (undici) requires duplex for a stream body. L74: body: stream_1.Readable.toWeb(stream), L75: duplex: 'half', ... L87: if (!res.body) { L88: fs.writeFileSync(dest, Buffer.from(await res.arrayBuffer())); L89: return; ... L160: const g = (0, framework_1.getGlobalOptions)(); L161: const active = Boolean(process.stderr.isTTY) && !g.quiet && !g.json; L162: if (!active) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli/core/io.jsView on unpkg · L70

dist/compliance/backup-verification.js#virtual:normalized:round1

Findings

1 Critical1 High4 Medium6 Low

CriticalCredential Exfiltrationdist/cli/core/io.js

HighSemantic Analysis Limiteddist/compliance/backup-verification.js#virtual:normalized:round1

MediumDynamic Requiredist/schema-types.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to ts-prorm-orm@4.7.1.

See all versions of ts-prorm-orm for other recorded verdicts.

Review the evidence and your use of ts-prorm-orm@4.7.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 06:29:43.561Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.