Openclaw Line 2026.5.12 Beta.5.Tgz

PassAudited by VirusTotal on May 7, 2026.

Overview

Package: @openclaw/line (npm) Version: 2026.5.7 Description: OpenClaw LINE channel plugin This package is an OpenClaw channel plugin designed to integrate with the LINE Messaging API. The source code implements standard channel functionality, including configuration parsing, credential resolution (supporting environment variables and secure file reading), webhook handling, and message sending. Security controls are robust, featuring mandatory webhook signature validation, replay attack mitigation using a persistent deduplication cache, inbound media size limits and secure storage integration, and explicit SSRF prevention (`resolvePinnedHostnameWithPolicy` with `allowPrivateNetwork: false`) for validating outbound media URLs. Access control relies on configurable DM and group policies (allowlist, pairing, disabled). The overall structure and security measures are appropriate for a trusted platform extension.