tscircuit@0.0.3002
⚠ Under reviewMake electronics using Typescript, React, and AI tools. Just prompt your agent to "use tscircuit" and 10x its PCB capabilities!
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe inspected source shows normal package entrypoints and no confirmed attack. The main and CLI entrypoints delegate behavior to dependencies whose source is unavailable in the inspected snapshot, so the review remains unresolved.
Decision evidence
public snapshot- The manifest points to dist/index.js and cli.mjs; the inspected CLI imports @tscircuit/cli, while the main entrypoint re-exports @tscircuit/core and @tscircuit/eval.
- The inspected @tscircuit/props bundle begins with schema definitions, and the React entrypoint selects a development or production module.
- The available package source does not resolve the behavior delegated to the core, eval, and CLI dependencies.
- No concrete attack behavior was identified in the inspected package entrypoints or the available props and React dependency files.
Source & flagged code
6 flaggedPackage contains source files above the normal full-analysis size ceiling.
dist/webworker.min.jsView on unpkgThe manifest points to dist/index.js and cli.mjs; the inspected CLI imports @tscircuit/cli, while the main entrypoint re-exports @tscircuit/core and @tscircuit/eval.
package.jsonView on unpkg · L1Findings
Affected versions and remediation
This report applies to tscircuit@0.0.3002.
See all versions of tscircuit for other recorded verdicts.
- Review the evidence and your use of tscircuit@0.0.3002 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.