@pilllesss/yorn@1.0.72: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@pilllesss/yorn@1.0.72: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

14 flagged · loading source

dist/yorn.cjsView file

22\r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`

High

Child Process

Package source references child process execution.

dist/yorn.cjsView on unpkg · L22

22\r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(` ... L29: `:return"\\n";case`\r`:return"\\r";case" ":return"\\t";default:return`\\u${e.codePointAt(0)?.toString(16).padStart(4,"0")??"0000"}`}}function eXO(e){let t="",i=!1;for(let r=0;r<e.l... L30: `){return"string"==typeof e?e:e.filter(e=>"text"===e.type).map(e=>e.text).join(t)}function eXG(e,t){return Yb.Unsafe({type:"string",enum:e,...t?.description&&{description:t.descrip... L31: `),i=e.UseUnevaluated()?[tGj.build([tGj.build(["const co","nt"],[0,1]),

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/yorn.cjsView on unpkg · L22

2globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev... L4: `),u.push(e),u.push(`\r ... L7: `),u.push(`\r L8: `)}u.push(null)}),u}async function eNC(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re... L9: ${eMP(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type ... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/yorn.cjsView on unpkg · L2

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/yorn.cjs: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... `)}function eXm(e,t){let i=Math.min(e.length,t.length),r=0;for(;r<i&&e[r]===t[r];)r++;return r}function eXf(e,t,i,r){let n=eXp(t),s=eXo(n),l=eXo(eXc(e.content)),a=s,o=0,u=0,d=i?.se... `){return"string"==typeof e?e:e.filter(e=>"text"===e.type).map(e=>e.text).join(t)}function eXG(e,t){return Yb.Unsafe({type:"string",enum:e,...t?.description&&{description:t.descrip... --api-key <key> API key (defaults to env vars) # Print a prov

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/yorn.cjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/yorn.cjs: `)),r.push(`--${i}--`),new t(r,{type:tGj.build(["bounda","ry=","mult","data; ","/form-","ipart"],[2,5,4,3,0,1])+i})}function eM6(e){let t=e.match(/\bfilename=("(.*?)"|([^()<>@,;:\\... AZURE_OPENAI_BASE_URL - Azure OpenAI/Cognitive Services base URL (e.g. https://{resource}.openai.azure.com) YORN_SHARE_VIEWER_URL - Base URL for /share command (default: https://pi.dev/session/) </html>`}function te6(e){return te5({title:tGj.build([tGj.build(["ful"," success"],[1,0]),"ntication","Authe"],[2,1,0]),heading:tGj.build(["Authen","on succes","ticati","sful"],[0,... `)||"";n.block.thinking=s||o||n.block.thinking,n.block.thinkingS

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/yorn.cjsView on unpkg

20`,e,`\r L21: `)),r.push(`--${i}--`),new t(r,{type:tGj.build(["bounda","ry=","mult","data; ","/form-","ipart"],[2,5,4,3,0,1])+i})}function eM6(e){let t=e.match(/\bfilename=("(.*?)"|([^()<>@,;:\\... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(` ... L29: `:return"\\n";case`\r`:return"\\r";case" ":return"\\t";default:return`\\u${e.codePointAt(0)?.toString(16).padStart(4,"0")??"0000"}`}}function eXO(e){let t="",i=!1;for(let r=0;r<e.l... L30: `){return"string"==typeof e?e:e.filter(e=>"text"===e.type)

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/yorn.cjsView on unpkg · L20

2globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev... L4: `),u.push(e),u.push(`\r ... L7: `),u.push(`\r L8: `)}u.push(null)}),u}async function eNC(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re... L9: ${eMP(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type ... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/yorn.cjsView on unpkg · L2

2Trigger-reachable credential exfiltration chain: manifest.bin -> dist/yorn.cjs L2: globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev... L4: `),u.push(e),u.push(`\r ... L7: `),u.push(`\r L8: `)}u.push(null)}),u}async function eNC(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re... L9: ${eMP(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type ... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/yorn.cjsView on unpkg · L2

20Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/yorn.cjs L20: `,e,`\r L21: `)),r.push(`--${i}--`),new t(r,{type:tGj.build(["bounda","ry=","mult","data; ","/form-","ipart"],[2,5,4,3,0,1])+i})}function eM6(e){let t=e.match(/\bfilename=("(.*?)"|([^()<>@,;:\\... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(` ... L29: `:return"\\n";case`\r`:return"\\r";case" ":return"\\t";default:return`\\u${e.codePointAt(0)?.toString(16).padStart(4,"0")??"0000"}`}}function eXO(e){let t="",i=!1;f

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/yorn.cjsView on unpkg · L20

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/yorn.cjsView on unpkg

1#!/usr/bin/env node L2: globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/yorn.cjsView on unpkg · L1

•path = dist/yorn.cjs kind = oversized_source_file sizeBytes = 7662952 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/yorn.cjsView on unpkg

•path = dist/yorn.cjs kind = oversized_cli_entrypoint sizeBytes = 7662952 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/yorn.cjsView on unpkg

dist/skills/screenshot/scripts/take_screenshot.pyView file

•path = dist/skills/screenshot/scripts/take_screenshot.py kind = build_helper sizeBytes = 19659 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/screenshot/scripts/take_screenshot.pyView on unpkg

Source & flagged code

14 flagged

dist/yorn.cjsView file

22\r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`

High

Child Process

Package source references child process execution.

dist/yorn.cjsView on unpkg · L22

22\r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(` ... L29: `:return"\\n";case`\r`:return"\\r";case" ":return"\\t";default:return`\\u${e.codePointAt(0)?.toString(16).padStart(4,"0")??"0000"}`}}function eXO(e){let t="",i=!1;for(let r=0;r<e.l... L30: `){return"string"==typeof e?e:e.filter(e=>"text"===e.type).map(e=>e.text).join(t)}function eXG(e,t){return Yb.Unsafe({type:"string",enum:e,...t?.description&&{description:t.descrip... L31: `),i=e.UseUnevaluated()?[tGj.build([tGj.build(["const co","nt"],[0,1]),

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/yorn.cjsView on unpkg · L22

2globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev... L4: `),u.push(e),u.push(`\r ... L7: `),u.push(`\r L8: `)}u.push(null)}),u}async function eNC(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re... L9: ${eMP(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type ... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/yorn.cjsView on unpkg · L2

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/yorn.cjs: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... `)}function eXm(e,t){let i=Math.min(e.length,t.length),r=0;for(;r<i&&e[r]===t[r];)r++;return r}function eXf(e,t,i,r){let n=eXp(t),s=eXo(n),l=eXo(eXc(e.content)),a=s,o=0,u=0,d=i?.se... `){return"string"==typeof e?e:e.filter(e=>"text"===e.type).map(e=>e.text).join(t)}function eXG(e,t){return Yb.Unsafe({type:"string",enum:e,...t?.description&&{description:t.descrip... --api-key <key> API key (defaults to env vars) # Print a prov

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/yorn.cjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/yorn.cjs: `)),r.push(`--${i}--`),new t(r,{type:tGj.build(["bounda","ry=","mult","data; ","/form-","ipart"],[2,5,4,3,0,1])+i})}function eM6(e){let t=e.match(/\bfilename=("(.*?)"|([^()<>@,;:\\... AZURE_OPENAI_BASE_URL - Azure OpenAI/Cognitive Services base URL (e.g. https://{resource}.openai.azure.com) YORN_SHARE_VIEWER_URL - Base URL for /share command (default: https://pi.dev/session/) </html>`}function te6(e){return te5({title:tGj.build([tGj.build(["ful"," success"],[1,0]),"ntication","Authe"],[2,1,0]),heading:tGj.build(["Authen","on succes","ticati","sful"],[0,... `)||"";n.block.thinking=s||o||n.block.thinking,n.block.thinkingS

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/yorn.cjsView on unpkg

20`,e,`\r L21: `)),r.push(`--${i}--`),new t(r,{type:tGj.build(["bounda","ry=","mult","data; ","/form-","ipart"],[2,5,4,3,0,1])+i})}function eM6(e){let t=e.match(/\bfilename=("(.*?)"|([^()<>@,;:\\... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(` ... L29: `:return"\\n";case`\r`:return"\\r";case" ":return"\\t";default:return`\\u${e.codePointAt(0)?.toString(16).padStart(4,"0")??"0000"}`}}function eXO(e){let t="",i=!1;for(let r=0;r<e.l... L30: `){return"string"==typeof e?e:e.filter(e=>"text"===e.type)

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/yorn.cjsView on unpkg · L20

2globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev... L4: `),u.push(e),u.push(`\r ... L7: `),u.push(`\r L8: `)}u.push(null)}),u}async function eNC(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re... L9: ${eMP(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type ... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/yorn.cjsView on unpkg · L2

2Trigger-reachable credential exfiltration chain: manifest.bin -> dist/yorn.cjs L2: globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev... L4: `),u.push(e),u.push(`\r ... L7: `),u.push(`\r L8: `)}u.push(null)}),u}async function eNC(e,t){let i=0,r=[],n=e.getReader(),s=!1;for(;!s;){let{done:e,value:l}=await n.read();if(l&&(r.push(l),i+=l?.byteLength??0),i>=t)break;s=e}n.re... L9: ${eMP(e)}`);if(null==s)throw new Il(`missing choices[${r}].tool_calls[${i}].type ... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/yorn.cjsView on unpkg · L2

20Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/yorn.cjs L20: `,e,`\r L21: `)),r.push(`--${i}--`),new t(r,{type:tGj.build(["bounda","ry=","mult","data; ","/form-","ipart"],[2,5,4,3,0,1])+i})}function eM6(e){let t=e.match(/\bfilename=("(.*?)"|([^()<>@,;:\\... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tGj.build(["-encoding","transfer"],[1,0])]&&!t[tGj.build(["t-length","conten"],[1,0])]}),e.on("socket",l=>{let a=(... L24: `)}function eXc(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(` ... L29: `:return"\\n";case`\r`:return"\\r";case" ":return"\\t";default:return`\\u${e.codePointAt(0)?.toString(16).padStart(4,"0")??"0000"}`}}function eXO(e){let t="",i=!1;f

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/yorn.cjsView on unpkg · L20

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/yorn.cjsView on unpkg

1#!/usr/bin/env node L2: globalThis.__yorn_dynamic_import = (m) => import(m); L3: var e,t,i,r,n,s,l,a,o,u,d,c,b,h,p,m,f,g,_,y,E,S,v,A,w,T,C,I,x,R,O,k,N,D,P,M,L,F,U,B,$,j,G,q,H,W,V,Y,K,z,Q,J,X,Z,ee,et,ei,er,en,es,el,ea,eo,eu,ed,ec,eb,eh,ep,em,ef,eg,e_,ey,eE,eS,ev...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/yorn.cjsView on unpkg · L1

•path = dist/yorn.cjs kind = oversized_source_file sizeBytes = 7662952 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/yorn.cjsView on unpkg

•path = dist/yorn.cjs kind = oversized_cli_entrypoint sizeBytes = 7662952 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/yorn.cjsView on unpkg

dist/skills/screenshot/scripts/take_screenshot.pyView file

•path = dist/skills/screenshot/scripts/take_screenshot.py kind = build_helper sizeBytes = 19659 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/screenshot/scripts/take_screenshot.pyView on unpkg