editframe-vite-plugin
Warn
Audited by Socket on May 12, 2026
1 alert found:
AnomalyAnomalyreferences/file-api.md
LOWAnomalyLOW
references/file-api.md
The described local development API surface is conventional for development tooling and mirrors production endpoints. Primary security concerns center on access controls for local filesystem access, potential path traversal, and management of in-memory legacy mappings. With proper isolation (dev-only network, authentication, input sanitization, and memory management), the risk is manageable. If deployed in a broader or production-like environment without safeguards, it could enable unauthorized access to local assets and cache data exposure.
Confidence: 100%Severity: 60%
Audit Metadata