Loading npm security reports…
Client feedback collection tool for Impakers OS
LPM treats this as warn-only first-party agent extension lifecycle risk. Postinstall mutates the consuming project’s Claude skill directory and may modify its ESLint config. This is a first-party developer-tool setup action, but occurs without an explicit setup command.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
dist/webpack.jsView on unpkg · L1Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/setup.mjsView on unpkg · L7Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L119Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
Package source references dynamic require/import behavior.
dist/webpack.jsView on unpkg · L1