Loading npm security reports…
Devflow 专项研发 Pi，基于固定版本 OMP Runtime 组装研发状态机、代码智能、设计、实现与质量门禁。
Installation automatically modifies runtime source belonging to a dependency. No confirmed data-exfiltration or remote-code-execution sink was found.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe manifest runs a postinstall hook automatically during installation.
package.jsonView on unpkg · L10Package ships non-JavaScript build or shell helper files.
plugins/devflow-core/runtime/hooks/post_tool.pyView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
plugins/devflow-intel/extensions/devflow-intel.tsView on unpkgThe hook targets internal source files of the pinned @oh-my-pi dependency and rewrites their contents.
bin/apply-opencode-go-session-hotfix.mjsView on unpkg · L11The hook targets internal source files of the pinned @oh-my-pi dependency and rewrites their contents.
bin/apply-opencode-go-session-hotfix.mjsView on unpkg · L55This report applies to @guanlin4924/devflow-pi@0.1.74.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L13The manifest runs a postinstall hook automatically during installation.
package.jsonView on unpkg · L10Package ships non-JavaScript build or shell helper files.
plugins/devflow-core/runtime/hooks/post_tool.pyView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
plugins/devflow-intel/extensions/devflow-intel.tsView on unpkgThe hook targets internal source files of the pinned @oh-my-pi dependency and rewrites their contents.
bin/apply-opencode-go-session-hotfix.mjsView on unpkg · L11The hook targets internal source files of the pinned @oh-my-pi dependency and rewrites their contents.
bin/apply-opencode-go-session-hotfix.mjsView on unpkg · L55