Loading npm security reports…
Package that contains all the providers of p-stream
No confirmed malicious attack surface. Install-time behavior only invokes the pnpm guard; runtime network requests implement user-invoked streaming-provider scrapers.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L2982Package source references a known benign dynamic code generation pattern.
dist/index.jsView on unpkg · L982Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L102Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L102Package source references a known benign dynamic code generation pattern.
dist/index.jsView on unpkg · L982Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L2982