Loading npm security reports…
RealTek CORE-THEME — shared React component & admin-screen library (AddFormV1, EditFormV1, ListView, DetailViewV1, ...).
Installation invokes a database seeder. A same-package dependency resolves an older release, creating a nested lifecycle supply-chain path; when enabled, the seeder reads project configuration and mutates a MongoDB database and the consumer project.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgAn install lifecycle loads the consumer environment, connects to an embedded authenticated database endpoint, mutates authorization state, and seeds a default administrator.
scripts/init-admin-mongodb.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist-lib/style.cssView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist-lib/Breadcrumb-DSpBqdSZ.cjsView on unpkgThis report applies to @realtek/core-theme@0.0.345.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L45Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L45An install lifecycle loads the consumer environment, connects to an embedded authenticated database endpoint, mutates authorization state, and seeds a default administrator.
scripts/init-admin-mongodb.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist-lib/style.cssView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist-lib/Breadcrumb-DSpBqdSZ.cjsView on unpkg