tscircuit@0.0.2987
⚠ Under reviewMake electronics using Typescript, React, and AI tools. Just prompt your agent to "use tscircuit" and 10x its PCB capabilities!
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected manifest has no install lifecycle hook, and the inspected entrypoints show no confirmed attack behavior. Manual review is needed because selected runtime dependencies imported by the main entry and CLI could not be assessed from the available source snapshot.
Decision evidence
public snapshot- The main entry re-exports @tscircuit/core and @tscircuit/eval, whose runtime behavior could not be verified from the available sources.
- Running the CLI imports @tscircuit/cli, whose implementation could not be verified from the available sources.
- The package manifest lists build and helper scripts but no install lifecycle hook.
- No malicious behavior is confirmed by the inspected package-owned entrypoint code.
Source & flagged code
6 flaggedPackage contains source files above the normal full-analysis size ceiling.
dist/webworker.min.jsView on unpkgThe main entry re-exports @tscircuit/core and @tscircuit/eval, whose runtime behavior could not be verified from the available sources.
package.jsonView on unpkg · L58Findings
Affected versions and remediation
This report applies to tscircuit@0.0.2987.
See all versions of tscircuit for other recorded verdicts.
- Review the evidence and your use of tscircuit@0.0.2987 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.