Loading npm security reports…
Package that contains all the providers of p-stream
The package extracts stored service credentials and transmits them to third-party streaming endpoints during provider use. It also runs an automatic npx command at installation.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe install lifecycle automatically invokes npx with automatic confirmation.
package.jsonView on unpkg · L102Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L2987Package source references a known benign dynamic code generation pattern.
dist/index.jsView on unpkg · L982Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L102The install lifecycle automatically invokes npx with automatic confirmation.
package.jsonView on unpkg · L102Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L102Package source references a known benign dynamic code generation pattern.
dist/index.jsView on unpkg · L982Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L2987