Loading npm security reports…
A state management library for Clicktap reference frontend.
No attack was identified in the inspected install hook or authentication request path.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe preinstall hook rejects nested installation and exits; it does not show file mutation or payload execution.
package.jsonView on unpkg · L93The request helper sends fetch requests to a supplied endpoint and returns JSON responses.
request-VRlU6wWt.mjsView on unpkg · L1The auth machine uses its configured login endpoint and passes caller-provided login credentials to its transport.
AuthProvider-Cqqyx53x.mjsView on unpkg · L267This report applies to @clicktap/state@3.0.5.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L93Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L93The preinstall hook rejects nested installation and exits; it does not show file mutation or payload execution.
package.jsonView on unpkg · L93The request helper sends fetch requests to a supplied endpoint and returns JSON responses.
request-VRlU6wWt.mjsView on unpkg · L1The auth machine uses its configured login endpoint and passes caller-provided login credentials to its transport.
AuthProvider-Cqqyx53x.mjsView on unpkg · L267