@agent-link/server: Clean npm security report (Allow)

Loading npm security reports…

Source & flagged code

3 flagged

dist/service.jsView file

Lines 1-21javascript

1import { execSync } from 'child_process';

2import { existsSync, mkdirSync, writeFileSync, unlinkSync } from 'fs';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/service.jsView on unpkg · L1

3import { join, dirname, resolve } from 'path';

4import { homedir } from 'os';

5import { fileURLToPath } from 'url';

6import { getLogDir, loadServerRuntimeState, clearServerRuntimeState, killProcess, isProcessAlive, } from './config.js';

7const SERVICE_NAME = 'agentlink-server';

8const LAUNCHD_LABEL = 'com.agentlink.server';

9function getCliPath() {

10 const __filename = fileURLToPath(import.meta.url);

11 return resolve(dirname(__filename), 'cli.js');

12}

13function getNodePath() {

14 return process.execPath;

15}

16// ── Linux (systemd) ──

17function isRoot() {

18 return process.getuid?.() === 0;

19}

20function getSystemdUnitPath() {

21 if (isRoot()) {

web/dist/vendor/PressStart2P-Regular.woff2View file

•path = web/dist/vendor/PressStart2P-Regular.woff2 kind = high_entropy_blob sizeBytes = 12480 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/vendor/PressStart2P-Regular.woff2View on unpkg

web/dist/monacoeditorwork/ts.worker.bundle.jsView file

•path = web/dist/monacoeditorwork/ts.worker.bundle.js kind = oversized_source_file sizeBytes = 13316922 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

web/dist/monacoeditorwork/ts.worker.bundle.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/service.jsView file

1import { execSync } from 'child_process'; L2: import { existsSync, mkdirSync, writeFileSync, unlinkSync } from 'fs'; ... L23: } L24: return join(homedir(), '.config', 'systemd', 'user', `${SERVICE_NAME}.service`); L25: } ... L142: try { L143: execSync(`launchctl unload "${plistPath}" 2>/dev/null`); L144: } ... L166: function getStartupBatPath() { L167: const startupDir = join(process.env.APPDATA || join(homedir(), 'AppData', 'Roaming'), 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Startup'); L168: return join(startupDir, `${SERVICE_NAME}.bat`); ... L206: export function serverServiceInstall(port) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/service.jsView on unpkg · L1

web/dist/vendor/PressStart2P-Regular.woff2View file

•path = web/dist/vendor/PressStart2P-Regular.woff2 kind = high_entropy_blob sizeBytes = 12480 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/vendor/PressStart2P-Regular.woff2View on unpkg

@agent-link/server: Clean npm security report (Allow) | LPM Firewall

@agent-link/server@0.1.501

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code