@phi-code-admin/phi-code@0.90.0: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@phi-code-admin/phi-code@0.90.0: Suspicious npm security report | LPM Firewall

Source & flagged code

6 flagged

package.jsonView file

Lines 28-68json

28 "examples",

29 "skills",

30 "agents",

31 "extensions",

32 "config",

33 "README.md",

34 "LICENSE",

35 "CHANGELOG.md",

36 "scripts"

37 ],

38 "scripts": {

39 "clean": "shx rm -rf dist",

40 "dev": "tsgo -p tsconfig.build.json --watch --preserveWatchOutput",

41 "build": "tsgo -p tsconfig.build.json && shx chmod +x dist/cli.js && npm run copy-assets",

42 "check:ext": "tsgo -p tsconfig.ext.json --noEmit",

43 "build:binary": "npm --prefix ../tui run build && npm --prefix ../ai run build && npm --prefix ../agent run build && npm run build && bun build --compile --external koffi ./dist/bun/cli.js --outfile dist/pi && npm run copy-binary-assets",

44 "copy-assets": "shx mkdir -p dist/modes/interactive/theme dist/core/export-html/vendor dist/core && shx cp src/modes/interactive/theme/*.json dist/modes/interactive/theme/ && shx cp src/core/default-models.json dist/core/ && shx cp src/core/export-html/template.html src/core/export-html/template.css src/core/export-html/template.js dist/core/export-html/ && shx cp src/core/export-html/vendor/*.js dist/core/export-html/vendor/",

45 "copy-binary-assets": "shx cp package.json dist/ && shx cp README.md dist/ && shx cp CHANGELOG.md dist/ && shx mkdir -p dist/theme && shx cp src/modes/interactive/theme/*.json dist/theme/ && shx mkdir -p dist/assets && shx cp -r src/modes/interactive/assets dist/ 2>/dev/null || true && shx mkdir -p dist/export-html/vendor && shx cp src/core/export-html/template.html dist/export-html/ && shx cp src/core/export-html/vendor/*.js dist/export-html/vendor/ && shx cp -r docs dist/ && shx cp -r examples dist/ && shx cp ../../node_modules/@silvia-odwyer/photon-node/photon_rs_bg.wasm dist/",

46 "test": "vitest --run",

47 "prepublishOnly": "npm run clean && npm run build",

48 "postinstall": "node scripts/postinstall.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L48

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L48

49 },

50 "dependencies": {

51 "@mariozechner/jiti": "^2.6.5",

52 "@modelcontextprotocol/sdk": "^1.29.0",

53 "@phi-code-admin/browser": "^1.0.4",

54 "@silvia-odwyer/photon-node": "^0.3.4",

55 "chalk": "^5.5.0",

56 "cli-highlight": "^2.1.11",

57 "diff": "^8.0.2",

58 "extract-zip": "^2.0.1",

59 "file-type": "^21.1.1",

60 "glob": "^13.0.1",

61 "hosted-git-info": "^9.0.2",

62 "ignore": "^7.0.5",

63 "marked": "^15.0.12",

64 "minimatch": "^10.2.3",

65 "phi-code-agent": "^0.74.0",

66 "phi-code-ai": "^0.74.0",

67 "phi-code-tui": "^0.74.0",

68 "proper-lockfile": "^4.1.2",

examples/extensions/doom-overlay/doom-engine.tsView file

Lines 44-84typescript

44 return this._height;

45 }

46

47 async init(): Promise<void> {

48 // Locate WASM build

49 const __dirname = dirname(fileURLToPath

dist/core/extensions/loader.jsView file

Lines 30-70javascript

30 // typebox (new upstream name)

31 typebox: _bundledTypebox,

32 "typebox/compile": _bundledTypeboxCompile,

33 "typebox/value": _bundledTypeboxValue,

34 "@sinclair/typebox": _bundledTypebox,

35 "@sinclair/typebox/compile": _bundledTypeboxCompile,

36

examples/extensions/doom-overlay/doom/build/doom.wasmView file

•path = examples/extensions/doom-overlay/doom/build/doom.wasm kind = wasm_module sizeBytes = 380169 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

examples/extensions/doom-overlay/doom/build/doom.wasmView on unpkg

examples/extensions/doom-overlay/doom/build.shView file

•path = examples/extensions/doom-overlay/doom/build.sh kind = build_helper sizeBytes = 3366 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/extensions/doom-overlay/doom/build.shView on unpkg