Loading npm security reports…
Opinionated coding-agent harness with strong defaults for provider-aligned workflows.
No confirmed malicious attack surface. The package is a user-invoked coding-agent CLI; its bundled dynamic loader is runtime tooling rather than install-time execution.
Package source references dynamic require/import behavior.
dist/worklet-bootstrap.jsView on unpkg · L1Package contains source files above the normal full-analysis size ceiling.
dist/main.jsView on unpkgPackage contains an oversized executable-looking CLI entrypoint.
dist/main.jsView on unpkgManifest exposes a user-invoked CLI and has no npm lifecycle hook.
package.jsonView on unpkg · L15Manifest exposes a user-invoked CLI and has no npm lifecycle hook.
package.jsonView on unpkg · L139Package source references dynamic require/import behavior.
dist/worklet-bootstrap.jsView on unpkg · L1Package contains source files above the normal full-analysis size ceiling.
dist/main.jsView on unpkgPackage contains an oversized executable-looking CLI entrypoint.
dist/main.jsView on unpkgManifest exposes a user-invoked CLI and has no npm lifecycle hook.
package.jsonView on unpkg · L15Manifest exposes a user-invoked CLI and has no npm lifecycle hook.
package.jsonView on unpkg · L139