Loading npm security reports…
Native Mikie relay launcher for MCP clients
LPM treats this as warn-only first-party agent extension lifecycle risk. Installation automatically launches an opaque platform-native executable for reconciliation. The native executable is not present in this package snapshot, leaving its file effects unverified.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgAn automatic postinstall hook runs during package installation.
package.jsonView on unpkg · L14The hook resolves and executes a platform-native binary with a trajectory-store reconciliation command.
scripts/reconcile-install.mjsView on unpkg · L42The package source does not contain the native binary it automatically launches, so its install-time file effects cannot be verified from this snapshot.
lib/launcher.mjsView on unpkg · L200This report applies to @getmikie/cli@1.1.101.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L15An automatic postinstall hook runs during package installation.
package.jsonView on unpkg · L14A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgThe hook resolves and executes a platform-native binary with a trajectory-store reconciliation command.
scripts/reconcile-install.mjsView on unpkg · L42The package source does not contain the native binary it automatically launches, so its install-time file effects cannot be verified from this snapshot.
lib/launcher.mjsView on unpkg · L200