Loading npm security reports…
CLI tool for Bohrium scientific computing platform
npm postinstall retrieves same-vendor companion CLI binaries and saves them in the user's Bohr tool directory. This is a remote binary staging capability, but no source evidence shows credential theft, agent-control mutation, or destructive behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgpostinstall runs automatically on npm install.
package.jsonView on unpkg · L8This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
postinstall.jsView on unpkgPackage source invokes a package manager install command at runtime.
run.jsView on unpkg · L64Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L9Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L9postinstall runs automatically on npm install.
package.jsonView on unpkg · L8This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
postinstall.jsView on unpkgPackage source invokes a package manager install command at runtime.
run.jsView on unpkg · L64