Loading npm security reports…
AI coding workflow orchestration kit — team edition
LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit ATDC installation registers AI-agent hooks/MCP servers; later MCP startup launches auto-repair. No confirmed network or credential-exfiltration path.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgA manifest entrypoint or package-local install chain reaches persistence behavior.
src/doctor.jsView on unpkg · L9Source writes installer persistence such as shell profile or service configuration.
src/doctor.jsView on unpkg · L9Package source invokes a package manager install command at runtime.
src/cli/publish.jsView on unpkg · L118Package ships non-JavaScript build or shell helper files.
bin/add-command.pyView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L25Package ships non-JavaScript build or shell helper files.
bin/add-command.pyView on unpkgA manifest entrypoint or package-local install chain reaches persistence behavior.
src/doctor.jsView on unpkg · L9Source writes installer persistence such as shell profile or service configuration.
src/doctor.jsView on unpkg · L9Package source invokes a package manager install command at runtime.
src/cli/publish.jsView on unpkg · L118