tscircuit@0.0.2977
⚠ Under reviewMake electronics using Typescript, React, and AI tools. Just prompt your agent to "use tscircuit" and 10x its PCB capabilities!
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected manifest and entrypoints show no install hook or concrete attack behavior. Direct runtime dependencies remain unresolved in this source review, so their behavior cannot be cleared and the result requires manual review.
Decision evidence
public snapshot- The manifest declares the CLI, core, and evaluation packages as dependencies, and the library entrypoint imports them.
- The CLI entrypoint imports the CLI dependency at runtime.
- The inspected local dependency snapshots show ordinary package metadata and validation-library exports.
- The manifest’s scripts section contains no install lifecycle hook.
- The CLI sets the package version and a bundle path before importing the CLI package.
- The library entrypoint re-exports circuit tooling and React components.
Source & flagged code
6 flaggedPackage contains source files above the normal full-analysis size ceiling.
dist/webworker.min.jsView on unpkgThe manifest declares the CLI, core, and evaluation packages as dependencies, and the library entrypoint imports them.
package.jsonView on unpkg · L57Findings
Affected versions and remediation
This report applies to tscircuit@0.0.2977.
See all versions of tscircuit for other recorded verdicts.
- Review the evidence and your use of tscircuit@0.0.2977 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.