Loading npm security reports…
SDLC 最小集 CLI（sdlc-cli）— 本地即真源的中间产物仓库与工作区装配
LPM blocks this version under the AI-agent control-surface policy. npm postinstall automatically modifies Claude and Codex-agent skill directories. It replaces same-named skills with bundled package content without user invocation.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
dist/cli.jsView on unpkg · L1Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L18Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L18Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
dist/cli.jsView on unpkg · L1