Loading npm security reports…
Screenata CLI — compliance workflows from your terminal
Static analysis completed at 86.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgManifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.jsView on unpkgPackage source invokes a package manager install command at runtime.
dist/cli.jsView on unpkg · L166Package source references a known benign dynamic code generation pattern.
dist/cli.jsView on unpkg · L3927This report applies to @screenata/cli@0.5.10.
See version security history for other recorded verdicts.
Evidence last updated: .
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg · L21Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L21Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.jsView on unpkgPackage source invokes a package manager install command at runtime.
dist/cli.jsView on unpkg · L166Package source references a known benign dynamic code generation pattern.
dist/cli.jsView on unpkg · L3927