Loading npm security reports…
AI coding workflow orchestration kit — team edition
Root npm install performs only an echo. An embedded, unreferenced nested package contains a postinstall that would register a local MCP server across agent configurations if independently lifecycle-executed.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/cli/publish.jsView on unpkgPackage source invokes a package manager install command at runtime.
src/cli/publish.jsView on unpkg · L118Package ships non-JavaScript build or shell helper files.
bin/add-command.pyView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L26Package ships non-JavaScript build or shell helper files.
bin/add-command.pyView on unpkgPackage source invokes a package manager install command at runtime.
src/cli/publish.jsView on unpkg · L118This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/cli/publish.jsView on unpkg