Loading npm security reports…
CLI and library for interacting with the Yoto API
Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package source references child process execution.
dist/lib/index.jsView on unpkg · L13960A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/lib/index.jsView on unpkg · L14014Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/lib/index.jsView on unpkg · L166Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/cli.jsView on unpkg · L51Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/lib/index.jsView on unpkg · L166Package source references child process execution.
dist/lib/index.jsView on unpkg · L13960A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/lib/index.jsView on unpkg · L14014Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/cli.jsView on unpkg · L51