roster-server
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The library dynamically loads Node.js modules from a user-specified directory (
wwwPath) to handle requests for different domains. This is the primary function of the virtual hosting service and is initiated through local configuration. - [SAFE]: Certificate management involves network communication with Let's Encrypt using the ACME protocol, which is a standard requirement for the tool's SSL automation features.
- [SAFE]: The documentation includes security best practices, such as explicitly mentioning path-traversal protection for static file serving and recommending staging environments to avoid rate limiting.
Audit Metadata