Loading npm security reports…
Install LoopFlow (.loop) into any repo so Claude Code — or any agent — can author and run self-correcting, human-gated coding loops.
No confirmed malicious attack surface. The package is an installer for a Loop/Claude Code workflow and its file writes are disclosed, bundled, and package-aligned.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
src/cli.mjsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L38Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L38Source fingerprint signature matches a known malicious package signature; route for source-aware review.
src/cli.mjsView on unpkg