Loading npm security reports…
A state management library for Clicktap reference frontend.
No confirmed attack was identified. The inspected authentication flow uses credentials and endpoints explicitly supplied by the caller.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe package.json preinstall hook prints an installation-location error and exits; it performs no mutation or network operation.
package.jsonView on unpkg · L93Source fingerprint signature matches a known malicious package signature; route for source-aware review.
AuthProvider-DnpAGGFT.jsView on unpkgAuthProvider-DnpAGGFT.js receives both the refresh token and authentication endpoints from its caller.
AuthProvider-DnpAGGFT.jsView on unpkg · L1Server refresh sends that explicitly supplied token to the caller-selected authentication endpoint.
AuthProvider-DnpAGGFT.jsView on unpkg · L1The request helper directly passes the supplied endpoint and options to fetch.
request-TlXquiLY.jsView on unpkg · L1This report applies to @clicktap/state@3.2.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L93Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L93The package.json preinstall hook prints an installation-location error and exits; it performs no mutation or network operation.
package.jsonView on unpkg · L93AuthProvider-DnpAGGFT.js receives both the refresh token and authentication endpoints from its caller.
AuthProvider-DnpAGGFT.jsView on unpkg · L1Server refresh sends that explicitly supplied token to the caller-selected authentication endpoint.
AuthProvider-DnpAGGFT.jsView on unpkg · L1Source fingerprint signature matches a known malicious package signature; route for source-aware review.
AuthProvider-DnpAGGFT.jsView on unpkgThe request helper directly passes the supplied endpoint and options to fetch.
request-TlXquiLY.jsView on unpkg · L1