Loading npm security reports…
Deterministic event-sourced context harness for AI-assisted engineering (HydrateZ).
LPM flags this version as an AI-agent control-surface risk. npm installation automatically modifies the user's global Claude Code command directory. It writes two behavior-bearing command definitions outside the installed package and project.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgpackage.json runs setup-global.js automatically as postinstall.
package.jsonView on unpkg · L11Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
bin/setup-global.jsView on unpkg · L7Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/setup-global.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L12package.json runs setup-global.js automatically as postinstall.
package.jsonView on unpkg · L11Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
bin/setup-global.jsView on unpkg · L7Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/setup-global.jsView on unpkg