@agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.32
Read-only Po server payload for Linux arm64 sandbox containers, mounted at /opt/po and run with Node 24.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThis package is a platform-specific Po server payload with no install hook. The inspected startup and migration behavior is consistent with managing Po's own runtime and user state, and the routing hints did not establish an attack.
Decision evidence
public snapshot- The package exports only its runtime descriptor and package metadata; its sole script is a build script.
- The descriptor identifies this as a Linux arm64 runtime payload and names the Po server entry point.
- The README describes mounting the runtime read-only at /opt/po and running it in a Node 24 container.
- The server entry initializes the agent directory and starts the server when invoked.
- The home migration code describes copying Po user state while retaining the legacy copy for older hosts.
- The runtime performs startup file initialization and migration, but the inspected code ties these actions to Po's own configuration and data.
- The scanner's NPM-related host matches include a CSS specification reference; searches found no NPM_TOKEN use in the flagged bundle.
Source & flagged code
6 flaggedThe scanner resource watchdog stopped semantic analysis before full coverage; route this package to AI without publishing a static verdict.
The package exports only its runtime descriptor and package metadata; its sole script is a build script.
package.jsonView on unpkg · L30Findings
Affected versions and remediation
This report applies to @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.32.
See all versions of @agimon-ai/po-container-runtime-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.32 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.