Loading npm security reports…
Signal Messenger voice and video calling library.
Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
Manifest entrypoint contains risky behavior absent from dist/build output.
scripts/fetch-prebuild.jsView on unpkg · L5Package ships non-JavaScript build or shell helper files.
dist/bin/virtual_audio.shView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L31Manifest entrypoint contains risky behavior absent from dist/build output.
scripts/fetch-prebuild.jsView on unpkg · L5Package ships non-JavaScript build or shell helper files.
dist/bin/virtual_audio.shView on unpkg