Loading npm security reports…
Superseded - gunakan versi >= 1.19.1
opencode CLI native untuk Termux/Android tanpa proot — membundel loader musl + binary opencode resmi (upstream opencode-ai)
On Android, postinstall retrieves and executes a remote native payload without checksum or signature verification. This is a real supply-chain execution surface, but no malicious endpoint or data theft behavior is present in the inspected source.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
install.mjsView on unpkg · L9Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
install.mjsView on unpkg · L9Package ships native binary artifacts.
prebuilt/ld-musl-aarch64-termux.soView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L9Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L9Package ships native binary artifacts.
prebuilt/ld-musl-aarch64-termux.soView on unpkgSource gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
install.mjsView on unpkg · L9A single source file combines environment access, network access, and code or shell execution; review context before blocking.
install.mjsView on unpkg · L9