Loading npm security reports…
BA-kit CLI — AI-powered Business Analyst toolkit for Claude Code
No confirmed malicious attack surface in the packaged source. Risky operations are package-aligned and activated by explicit ba-kit install/update/uninstall commands, while the lifecycle hook only warns about a local PATH conflict.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L14Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L14