Loading npm security reports…
A state management library for Clicktap reference frontend.
No malicious attack surface was identified. The install hook guards against nested installation, and inspected network behavior follows configured authentication endpoints.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgpackage.json's preinstall hook only rejects nested installs and prints a monorepo guidance message.
package.jsonView on unpkg · L92Authentication calls require an endpoint supplied through the provider configuration.
AuthProvider-BCmw2hiQ.mjsView on unpkg · L94Login uses the configured login endpoint and caller-provided username and password.
AuthProvider-BCmw2hiQ.mjsView on unpkg · L276The shared request helper sends requests to its supplied URL and parses the response; no package-controlled recipient is established.
request-DNOy04EM.mjsView on unpkg · L8This report applies to @clicktap/state@3.3.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L93Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L93package.json's preinstall hook only rejects nested installs and prints a monorepo guidance message.
package.jsonView on unpkg · L92Authentication calls require an endpoint supplied through the provider configuration.
AuthProvider-BCmw2hiQ.mjsView on unpkg · L94Login uses the configured login endpoint and caller-provided username and password.
AuthProvider-BCmw2hiQ.mjsView on unpkg · L276The shared request helper sends requests to its supplied URL and parses the response; no package-controlled recipient is established.
request-DNOy04EM.mjsView on unpkg · L8