What this review found
Dependency advisory GHSA-fx2h-pf6j-xcff applies
Material concern · medium confidence
A high-severity security issue was found in a package this plugin uses to open web pages for login. On Windows computers, this package could be tricked into running unwanted commands if a malicious link is opened through it. Since this plugin uses the package for its login flow, there is a real chance this could be exploited, though the exact risk depends on how the plugin constructs the login URLs.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-fx2h-pf6j-xcff to a dependency declared by this repository.
Contextual assessment: A high-severity advisory was matched against a declared dependency. Among the production dependencies in this lockfile, the open package at version range caret 11.0.0 is the most likely candidate, as it has a known high-severity advisory involving command injection on Windows when opening URLs containing specially crafted characters. The open package is a production dependency used by this plugin to launch browser-based authentication flows for Google Antigravity login. If any URL passed to open is constructed from server responses, redirect parameters, or other externally influenced data, an attacker could potentially trigger arbitrary command execution on Windows hosts. The exact resolved version in the lockfile and the source code calling open are not visible in the supplied evidence, so runtime reachability of attacker-controlled input cannot be fully confirmed. The impact of command injection is high, and exploitability is plausible given the authentication flow context, but confidence is medium due to the missing package identity and source code.
Impact: high · Exploitability: plausible
Developer action: Update the open dependency to the latest patched version and ensure that any URL passed to it is a hardcoded or strictly validated Google authentication endpoint, rejecting any URL containing shell metacharacters or unexpected schemes.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-fx2h-pf6j-xcff
- File role
- production
- Source
- package-lock.json
Minor cautions
Dependency advisory GHSA-v6wh-96g9-6wx3 applies
Minor caution · medium confidence
A security issue was found in the Svelte UI framework used by this plugin. The framework code is included in the final plugin file, but the specific issue would only matter if the plugin displayed web links or content from untrusted sources, which this plugin does not appear to do.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-v6wh-96g9-6wx3 to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability (href/XSS sanitization). Svelte is declared as a direct production dependency at ^4.2.0 and is bundled into the shipped extension artifact. The vulnerable runtime code is therefore present in the output, but this extension is a model-provider plugin for RisuAI that handles authentication and model selection; it is unlikely to render attacker-controlled URLs or untrusted content in Svelte templates that would trigger the vulnerable code path.
Impact: low · Exploitability: unlikely
Developer action: Update svelte to a patched version when convenient.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-v6wh-96g9-6wx3
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-phwv-c562-gvmh applies
Minor caution · medium confidence
A security issue was found in the Svelte UI framework used by this plugin. The issue is present in the final plugin file but is unlikely to be triggered because the plugin does not display untrusted web content.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-phwv-c562-gvmh to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability. Svelte is a direct production dependency (^4.2.0) and its code is bundled into the shipped extension. The vulnerable code is present in the artifact, but the extension functions as a chat-completion provider plugin handling auth tokens and model lists, making it unlikely that attacker-controlled content reaches the vulnerable Svelte rendering path.
Impact: low · Exploitability: unlikely
Developer action: Update svelte to a patched version when convenient.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-phwv-c562-gvmh
- File role
- production
- Source
- package-lock.json
Gitleaks reported generic-api-key
Minor caution · high confidence
The code contains a Google login secret that is built into the plugin. This is not ideal because anyone who looks inside the plugin file can see it. However, for this type of app-based Google login, Google's own system expects that this secret cannot be kept fully private, so the real-world risk is low. It is used only to let users log in, not for anything hidden or harmful.
Technical evidence
Scanner reason: Gitleaks matched secret-detection rule generic-api-key in this repository.
Contextual assessment: The matched value is a Google OAuth client secret hardcoded alongside a client ID for an OAuth flow used by this RisuAI plugin to authenticate users against Google Antigravity. For installed/desktop-style applications, Google's own OAuth 2.0 model acknowledges that the client secret cannot be kept truly confidential and functions more as a static parameter than a protected secret. The secret is distributed in the built bundle by design. While hardcoding credentials in source is poor practice and the secret is visible to anyone who inspects the bundle, the practical impact is limited because this is an installed-application OAuth flow rather than a server-side confidential client. No exfiltration, concealment, or malicious data flow is present; the credential is used for its stated authentication purpose.
Impact: low · Exploitability: unlikely
Developer action: Avoid hardcoding the OAuth client secret in source. Where possible, use Google's recommended approach for installed applications or load the credential from configuration. Rotate the exposed client secret if abuse is a concern.
- Scanner
- gitleaks 8.30.1
- Rule
- generic-api-key
- File role
- production
- Source
- src/auth/index.ts:18
Dependency advisory GHSA-rcqx-6q8c-2c42 applies
Minor caution · medium confidence
A security issue was found in the Svelte UI framework used by this plugin. The framework code is in the final plugin file, but the plugin's functionality does not create conditions where the issue could be exploited.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-rcqx-6q8c-2c42 to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability. Svelte is a direct production dependency (^4.2.0) bundled into the shipped extension. The vulnerable runtime code is included in the artifact, but the extension is a provider plugin for RisuAI that manages authentication and model configuration, not rendering of untrusted external content, so the vulnerable path is unlikely to be reached.
Impact: low · Exploitability: unlikely
Developer action: Update svelte to a patched version when convenient.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-rcqx-6q8c-2c42
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-4w7w-66w2-5vf9 applies
Minor caution · medium confidence
A security issue was found in the Svelte UI framework used by this plugin. The issue exists in the shipped plugin file but is unlikely to be triggered by the plugin's normal operation.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-4w7w-66w2-5vf9 to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability. Svelte is a direct production dependency (^4.2.0) and is bundled into the shipped extension. The vulnerable code is present in the output artifact, but this provider plugin handles auth tokens and model selection rather than rendering untrusted user-supplied content, so exploitation is unlikely.
Impact: low · Exploitability: unlikely
Developer action: Update svelte to a patched version when convenient.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-4w7w-66w2-5vf9
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-m56q-vw4c-c2cp applies
Minor caution · medium confidence
A security issue was found in the Svelte UI framework used by this plugin. The framework code is included in the final plugin, but the plugin does not display untrusted content that could trigger the issue.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-m56q-vw4c-c2cp to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to a Svelte runtime vulnerability. Svelte is a direct production dependency (^4.2.0) bundled into the shipped extension. The vulnerable runtime code is in the artifact, but the extension is a model-provider plugin for RisuAI focused on authentication and model configuration, making it unlikely that attacker-controlled content reaches the vulnerable rendering path.
Impact: low · Exploitability: unlikely
Developer action: Update svelte to a patched version when convenient.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-m56q-vw4c-c2cp
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-7r86-cg39-jmmj applies
Minor caution · medium confidence
Detailed wording was omitted by the public report safety filter.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-7r86-cg39-jmmj to a dependency declared by this repository.
Contextual assessment: OSV-scanner matched a high-severity advisory against a dependency in the lockfile. The provided source excerpt shows the root package and early lockfile entries but does not include the specific flagged package or its version. The project is a RisuAI browser plugin whose build output is a single bundled JS file; most declared dependencies are devDependencies (vite, terser, tailwind, postcss, etc.) that do not ship to end users. Without identifying the specific package and confirming it is a runtime dependency with reachable vulnerable code, concrete end-user harm cannot be established. The advisory likely affects a build-time tool with no runtime reachability in the shipped plugin.
Impact: low · Exploitability: unlikely
Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-7r86-cg39-jmmj
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-6g55-p6wh-862q applies
Minor caution · medium confidence
A scanner flagged a vulnerable dependency, but the affected package is likely a development tool that does not end up in the final plugin file users import. The risk to end users is probably low.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-6g55-p6wh-862q to a dependency declared by this repository.
Contextual assessment: OSV-scanner matched a high-severity advisory against a lockfile dependency. The specific package and version are not visible in the provided source excerpt. The project ships a bundled JS artifact for RisuAI; the majority of dependencies are build-time devDependencies. Runtime dependencies are limited to lucide-svelte, open, svelte, and tsx. Without confirming the flagged package is among runtime dependencies and that attacker-controlled input reaches the vulnerable code path in the browser extension context, runtime impact cannot be established.
Impact: low · Exploitability: unlikely
Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-6g55-p6wh-862q
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-67mh-4wv8-2f99 applies
Minor caution · medium confidence
A scanner found a medium-severity vulnerability in a dependency. Since this project produces a bundled file and most dependencies are build tools, the issue likely does not affect users of the final plugin.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-67mh-4wv8-2f99 to a dependency declared by this repository.
Contextual assessment: OSV-scanner matched a medium-severity advisory against a lockfile dependency. The specific package is not identifiable from the provided source excerpt. Given the project structure (browser extension with bundled output and predominantly devDependencies), the vulnerable code is unlikely to reach end users. No attacker-controlled input path to the vulnerable code has been demonstrated.
Impact: low · Exploitability: unlikely
Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-67mh-4wv8-2f99
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-r28c-9q8g-f849 applies
Minor caution · medium confidence
A scanner flagged a high-severity vulnerability in a dependency, but the affected package is most likely a development tool that does not ship in the final plugin. The risk to end users appears low.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-r28c-9q8g-f849 to a dependency declared by this repository.
Contextual assessment: OSV-scanner matched a high-severity advisory against a lockfile dependency. The specific package and version are not visible in the provided source excerpt. The project is a RisuAI plugin that bundles its output; most dependencies are devDependencies not present in the shipped artifact. Without identifying the flagged package and confirming runtime reachability in the browser extension context, concrete user harm cannot be established.
Impact: low · Exploitability: unlikely
Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-r28c-9q8g-f849
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-f7gr-6p89-r883 applies
Minor caution · medium confidence
A scanner found a medium-severity vulnerability in a dependency. This likely affects a build tool rather than the final plugin users import, so the risk is probably low.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-f7gr-6p89-r883 to a dependency declared by this repository.
Contextual assessment: OSV-scanner matched a medium-severity advisory against a lockfile dependency. The specific package is not identifiable from the provided source excerpt. The project bundles its output for RisuAI and most dependencies are build-time devDependencies. No runtime reachability or attacker-controlled input path has been demonstrated for the vulnerable code in the shipped artifact.
Impact: low · Exploitability: unlikely
Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-f7gr-6p89-r883
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-3v7f-55p6-f55p applies
Minor caution · medium confidence
A scanner found a medium-severity vulnerability in a dependency. Since the project bundles its output and most dependencies are build tools, the issue likely does not affect end users.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-3v7f-55p6-f55p to a dependency declared by this repository.
Contextual assessment: OSV-scanner matched a medium-severity advisory against a lockfile dependency. The specific package is not visible in the provided source excerpt. The project produces a bundled JS file for RisuAI with mostly devDependencies. Without confirming the flagged package is a runtime dependency with reachable vulnerable code, end-user impact cannot be established.
Impact: low · Exploitability: unlikely
Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-3v7f-55p6-f55p
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-mw96-cpmx-2vgc applies
Minor caution · medium confidence
A scanner flagged a high-severity vulnerability in a dependency. The affected package is likely a development tool that does not ship in the final plugin, so the risk to users appears low.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-mw96-cpmx-2vgc to a dependency declared by this repository.
Contextual assessment: OSV-scanner matched a high-severity advisory against a lockfile dependency. The specific package and version are not identifiable from the provided source excerpt. The project is a browser extension plugin that ships a bundled JS artifact; the majority of dependencies are devDependencies. Without confirming the flagged package is a runtime dependency with reachable vulnerable code and attacker-controlled input, concrete user harm cannot be established.
Impact: low · Exploitability: unlikely
Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-mw96-cpmx-2vgc
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-f886-m6hf-6m8v applies
Minor caution · medium confidence
A scanner found a medium-severity vulnerability in a dependency. This most likely affects a build tool rather than the final plugin, so the risk to end users is probably low.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-f886-m6hf-6m8v to a dependency declared by this repository.
Contextual assessment: OSV-scanner matched a medium-severity advisory against a lockfile dependency. The specific package is not visible in the provided source excerpt. The project bundles its output for RisuAI and most dependencies are build-time devDependencies. No runtime reachability or attacker-controlled input path to the vulnerable code has been demonstrated in the shipped artifact.
Impact: low · Exploitability: unlikely
Developer action: Update the flagged dependency to a patched version during the next build cycle. Run npm audit to identify the specific package and version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-f886-m6hf-6m8v
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-5j98-mcp5-4vw2 applies
Minor caution · medium confidence
A build tool used when creating this extension has a known security issue, but it only affects the development process, not the final product that users install. The vulnerable tool is not part of what gets shipped to users.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-5j98-mcp5-4vw2 to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to a known vulnerability in a build-toolchain transitive dependency (tar path traversal during extraction). The package is used only during npm install and build steps. The shipped artifact is a bundled browser extension JS file that does not include or execute this dependency at runtime. No attacker-controlled input reaches the vulnerable code in the context of end users importing the built extension.
Impact: low · Exploitability: unlikely
Developer action: Update the affected build dependency to a patched version during the next maintenance cycle.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-5j98-mcp5-4vw2
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-qx2v-qp2m-jg93 applies
Minor caution · medium confidence
A helper tool used during the build process has a performance-related security flaw. It does not affect the finished extension that users load into their application.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-qx2v-qp2m-jg93 to a dependency declared by this repository.
Contextual assessment: This advisory matches a ReDoS vulnerability in cross-spawn, a transitive dev dependency used during build. The vulnerable code is not bundled into the production extension output and has no runtime reachability for end users. Attacker control over input is limited to the local development environment.
Impact: low · Exploitability: unlikely
Developer action: Update the affected build dependency to a patched version during the next maintenance cycle.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-qx2v-qp2m-jg93
- File role
- production
- Source
- package-lock.json
Gitleaks reported generic-api-key
Minor caution · medium confidence
This is a Google login secret built into the plugin so it can sign users into Google Antigravity. Google's own rules say this kind of app secret is not truly private because it lives inside software users run locally, so it is not a stolen server password. Still, it is better practice not to store secrets directly in the code.
Technical evidence
Scanner reason: Gitleaks matched secret-detection rule generic-api-key in this repository.
Contextual assessment: The flagged line is a Google OAuth client secret constant used alongside a client ID for the plugin's stated Google Antigravity OAuth login flow. The matched value was redacted in the supplied evidence, so the actual secret is not present here. For installed/desktop-style OAuth applications, Google treats the client secret as non-confidential because it is shipped to clients, so hardcoding it is a common pattern rather than a server-side credential leak. It is still preferable to avoid committing secrets to source and to rotate if the value was published.
Impact: low · Exploitability: unlikely
Developer action: Avoid committing OAuth client secrets directly in source where possible; consider loading from configuration or environment. If the value was published, rotate it in the Google Cloud console.
- Scanner
- gitleaks 8.30.1
- Rule
- generic-api-key
- File role
- production
- Source
- src/auth/index.ts:17
Dependency advisory GHSA-fxqj-rqcc-2cmp applies
Minor caution · medium confidence
The local development server used by the developer has a security setting that could be improved, but this server is never part of the extension that end users install.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-fxqj-rqcc-2cmp to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to an esbuild development server CORS issue. esbuild is a dev dependency used by the vite build toolchain. The vulnerability affects the local dev server, not the bundled production output. End users of the extension are not exposed to the dev server.
Impact: low · Exploitability: unlikely
Developer action: Update esbuild to a patched version in the build toolchain.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-fxqj-rqcc-2cmp
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-3ppc-4f35-3m26 applies
Minor caution · medium confidence
Detailed wording was omitted by the public report safety filter.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-3ppc-4f35-3m26 to a dependency declared by this repository.
Contextual assessment: This advisory matches a vite development server vulnerability. Vite is declared as a dev dependency and is used only to bundle the extension. The vulnerable dev server functionality is not present in the shipped dist output. No runtime reachability exists for end users.
Impact: low · Exploitability: unlikely
Developer action: Update vite to a patched version in devDependencies.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-3ppc-4f35-3m26
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-mh99-v99m-4gvg applies
Minor caution · medium confidence
A tool used only when building the extension has a security advisory. The final product users install is not affected because the tool is not included in it.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to a build-toolchain dependency vulnerability. The affected package is part of the vite or esbuild dev toolchain used only during the build process. The production extension bundle does not include or execute this code at runtime.
Impact: low · Exploitability: unlikely
Developer action: Update the affected build dependency to a patched version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-mh99-v99m-4gvg
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-c2c7-rcm5-vvqj applies
Minor caution · medium confidence
The developer's local testing tool has a security flaw in its preview server. This server is not part of the extension that users actually install and use.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-c2c7-rcm5-vvqj to a dependency declared by this repository.
Contextual assessment: This advisory matches a vite development server vulnerability such as XSS or arbitrary file access through the dev server. Vite is a dev dependency used only for bundling. The shipped extension output does not run a dev server, so end users are not exposed.
Impact: low · Exploitability: unlikely
Developer action: Update vite to a patched version in devDependencies.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-c2c7-rcm5-vvqj
- File role
- production
- Source
- package-lock.json
Gitleaks reported generic-api-key
Minor caution · high confidence
The code includes a password-like key for connecting to Google. Because this is a plugin that runs on the user's own device, this key is not truly secret and is expected to be visible to the user. It is a minor weakness because it is hardcoded, but it does not pose a direct security risk to the user.
Technical evidence
Scanner reason: Gitleaks matched secret-detection rule generic-api-key in this repository.
Contextual assessment: The file contains a hardcoded Google OAuth client secret. The surrounding code implements PKCE, indicating this is a public client (e.g., browser extension or desktop app). For public clients, the client secret is not considered truly confidential by Google's OAuth guidelines, as it is embedded in the distributed application. However, hardcoding it is a minor weakness as it could be extracted and used to impersonate the application if the flow were ever changed to a confidential client.
Impact: low · Exploitability: unlikely
Developer action: Consider using a Google OAuth flow that does not require a client secret for public clients, or ensure the client is correctly configured as a public client in Google Cloud Console.
- Scanner
- gitleaks 8.30.1
- Rule
- generic-api-key
- File role
- production
- Source
- src/auth/index.ts:17
Dependency advisory GHSA-2v37-7h3g-55p8 applies
Minor caution · medium confidence
A packaging tool used during the build step has a known file-handling issue. It is not included in the extension that users load, so it poses no risk to them.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-2v37-7h3g-55p8 to a dependency declared by this repository.
Contextual assessment: This advisory corresponds to a tar arbitrary file overwrite vulnerability in a transitive build dependency. The package is used during npm install and build, not at runtime in the browser extension. No attacker-controlled input reaches this code for end users of the shipped artifact.
Impact: low · Exploitability: unlikely
Developer action: Update the affected transitive build dependency to a patched version.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-2v37-7h3g-55p8
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-rgw5-rvv9-x895 applies
Minor caution · medium confidence
The build tool's local server has a security advisory, but this server code is never shipped to users. Only the finished bundled extension file is distributed.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895 to a dependency declared by this repository.
Contextual assessment: This advisory matches a vite development server vulnerability. Vite is declared as a dev dependency and used only to produce the bundled extension output. The vulnerable dev server is not part of the shipped artifact and has no runtime reachability for end users.
Impact: low · Exploitability: unlikely
Developer action: Update vite to a patched version in devDependencies.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-rgw5-rvv9-x895
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-pr6f-5x2q-rwfp applies
Minor caution · low confidence
Detailed wording was omitted by the public report safety filter.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-pr6f-5x2q-rwfp to a dependency declared by this repository.
Contextual assessment: A medium-severity advisory was matched against a declared dependency in this lockfile. The project's production dependencies are limited to lucide-svelte, open, svelte, and tsx, while the remaining dependencies are dev-only build tools. Without the exact package name from the scanner, the most likely candidates for a medium advisory in this dependency set are build-time tools such as postcss or vite plugins. These dev dependencies do not ship in the built plugin output and have no runtime reachability in the final extension loaded by RisuAI. The advisory severity alone does not establish concrete user harm because the vulnerable code path is not reachable at runtime.
Impact: low · Exploitability: unlikely
Developer action: Update the affected dev dependency to a patched version during the next routine build maintenance.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-pr6f-5x2q-rwfp
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-crpf-4hrx-3jrp applies
Minor caution · low confidence
Another medium-level security issue was found in a package used during development. Like the other medium issue, this is most likely in a build tool that does not end up in the final plugin users install, so the practical risk is low.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-crpf-4hrx-3jrp to a dependency declared by this repository.
Contextual assessment: A second medium-severity advisory was matched against a declared dependency. As with the other medium advisory, the most likely affected packages in this dependency set are dev-only build tools that are not present in the built plugin artifact. The project builds to a single JavaScript file imported into RisuAI, so dev dependencies have no runtime presence for end users. Without the exact package name and resolved version, concrete runtime harm cannot be established. The advisory severity is medium and the vulnerable code is unlikely to be reachable at runtime in the shipped extension.
Impact: low · Exploitability: unlikely
Developer action: Update the affected dev dependency to a patched version during the next routine build maintenance.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-crpf-4hrx-3jrp
- File role
- production
- Source
- package-lock.json
Expected scanner matches (4)
Dependency advisory GHSA-23c5-xmqv-rm74 applies
Expected behavior · medium confidence
This security issue affects the development tool used to build the plugin, not the plugin itself. The problem is in a local testing server that is never included in the final plugin file that users install.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-23c5-xmqv-rm74 to a dependency declared by this repository.
Contextual assessment: This high-severity advisory corresponds to a Vite development server vulnerability. Vite is declared as a devDependency (^5.0.0) used only for building the extension. The vulnerable code is the development server, which is not included in the production build output. The shipped artifact is a bundled JavaScript file imported into RisuAI, not a running dev server, so the vulnerable code path is absent from the distributed extension.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-23c5-xmqv-rm74
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-3jxr-9vmj-r5cp applies
Expected behavior · medium confidence
This security issue affects a build tool's local development server, not the plugin itself. The vulnerable server code is never included in the final plugin file that users install.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-3jxr-9vmj-r5cp to a dependency declared by this repository.
Contextual assessment: This high-severity advisory corresponds to an esbuild development server vulnerability. esbuild is a transitive build-time dependency (via tsx ^4.20.6 and vite ^5.0.0) used only during the build process. The vulnerable code is the esbuild dev server, which is not part of the production build output. The shipped extension is a bundled JavaScript file with no dev server component, so the vulnerable code is absent from the distributed artifact.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-3jxr-9vmj-r5cp
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-28wg-ghj8-5hjv applies
Expected behavior · medium confidence
This security issue affects the development tool used to build the plugin, not the plugin itself. The problem is in a local testing server that is never included in the final plugin file that users install.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-28wg-ghj8-5hjv to a dependency declared by this repository.
Contextual assessment: This high-severity advisory corresponds to a Vite development server vulnerability. Vite is declared as a devDependency (^5.0.0) used only for building the extension. The vulnerable code is the development server component, which is not included in the production build output. The shipped artifact is a bundled JavaScript file imported into RisuAI, not a running dev server, so the vulnerable code path is absent from the distributed extension.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-28wg-ghj8-5hjv
- File role
- production
- Source
- package-lock.json
Credential access and network transmission in one file
Expected behavior · high confidence
The code uses your login token to ask Google who you are, which is a normal part of signing in with Google. The token only goes to Google's own website, not anywhere suspicious.
Technical evidence
Scanner reason: A credential source and an outbound network operation were detected in the same file.
Contextual assessment: The flagged network call sends the OAuth2 access token as a Bearer header to Google's official userinfo endpoint to retrieve the authenticated user's profile. This is a standard OAuth2 user info flow. Tokens are persisted via the plugin framework's local configuration API and are sent only to Google's own API domain, matching the project's stated purpose of integrating Google Antigravity as a provider. No credentials are transmitted to any third-party or unexpected destination.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- tavernkeeper 3
- Rule
- credential-exfiltration
- File role
- production
- Source
- src/auth/index.ts:287