Loading npm security reports…
Package that contains all the providers of p-stream
No confirmed malicious attack surface. Runtime provider scrapers fetch streaming services only when the host invokes them; several optional scrapers use locally configured streaming-service tokens.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L2983Package source references a known benign dynamic code generation pattern.
dist/index.jsView on unpkg · L982Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L102Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L102Package source references a known benign dynamic code generation pattern.
dist/index.jsView on unpkg · L982Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L2983