Loading npm security reports…
Manage agentic work across repositories with durable workbases
LPM treats this as warn-only first-party agent extension lifecycle risk. Installation copies a Pi extension into the user-level Pi extensions directory. The extension can discover Agency workbases and add Agency/project instructions to Pi agent system prompts.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgnpm postinstall automatically installs a Pi agent extension.
package.jsonView on unpkg · L65Package source references dynamic require/import behavior.
src/utils/interactive-loader.tsView on unpkg · L3Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L66Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L66npm postinstall automatically installs a Pi agent extension.
package.jsonView on unpkg · L65Package source references dynamic require/import behavior.
src/utils/interactive-loader.tsView on unpkg · L3