Loading npm security reports…
End-to-end action protocol for TypeScript. Single package with subpath exports (core + adapters).
LPM flags this version as an AI-agent control-surface risk. Installing the dependency silently writes broad AI-agent skills and Claude hook configuration into the consumer repository. It also configures Git hooks.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references a known benign dynamic code generation pattern.
src/ui/docs/markdown.tsxView on unpkg · L59Package source references dynamic require/import behavior.
bin/lib/db-migrate-runner.mjsView on unpkg · L47A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/cli.mjsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L351Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L351A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/cli.mjsView on unpkgPackage source references a known benign dynamic code generation pattern.
src/ui/docs/markdown.tsxView on unpkg · L59Package source references dynamic require/import behavior.
bin/lib/db-migrate-runner.mjsView on unpkg · L47