Loading npm security reports…
CLI for the AirStrings remote string management platform
The postinstall hook bootstraps a platform-specific AirStrings binary from the package's release location. The downloaded binary is checksum-checked, stored under the package-local `vendor/` directory, and only launched by explicit CLI invocation. No confirmed malicious source behavior is present.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
install.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L29Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L29This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
install.jsView on unpkg