registry / @omicverse/omicos / 0.2.44

@omicverse/omicos@0.2.44

OmicOS — agentic omics-analysis runtime & CLI (omicos-core). Installs the matching native binary for your platform.

AI Security Review

scanned 16d ago · by lpm-firewall-ai

No confirmed malicious attack surface in this wrapper package. Install-time script is informational, and runtime CLI delegates to a package-aligned native binary dependency.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install or user runs omicos CLI

Impact

No source-confirmed malicious impact in inspected files

Mechanism

postinstall PATH notice and native binary launcher

Rationale

The suspicious primitives are package-aligned: postinstall only warns about PATH precedence, and the CLI wrapper resolves and executes the matching optional native package. Static source inspection found no unconsented network, credential, filesystem mutation, persistence, or AI-agent control-surface behavior.

Evidence

package.jsonbin/postinstall.jsbin/omicos.js

Network endpoints1

git+https://github.com/PrimorDecode/omicos-core.git

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

package.json defines postinstall: node bin/postinstall.js

@omicverse/omicos@0.2.44

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code