Loading npm security reports…
Pi extension for checked plans, live reports, completion acceptance, and quality checks.
LPM treats this as warn-only first-party agent extension lifecycle risk. This is a first-party Pi agent extension that activates during Pi sessions. Its review workflows spawn configured Pi subprocesses and serve local HTML reports; no concrete covert exfiltration, destructive action, or install-time mutation was found.
package.json declares a Pi extension entrypoint at src/index.ts.
package.jsonView on unpkgsrc/index.ts registers session handlers and /goal, /flow, and /review extensions.
src/index.tsView on unpkgsrc/shared/spawn-runner.ts launches configured child processes for review workflows.
src/shared/spawn-runner.tsView on unpkgsrc/shared/config.ts defaults child reviewers to pi with bash enabled.
src/shared/config.tsView on unpkgsrc/shared/report-server.ts opens a localhost report server and browser URL.
src/shared/report-server.tsView on unpkgpackage.json declares a Pi extension entrypoint at src/index.ts.
package.jsonView on unpkgsrc/index.ts registers session handlers and /goal, /flow, and /review extensions.
src/index.tsView on unpkgsrc/shared/spawn-runner.ts launches configured child processes for review workflows.
src/shared/spawn-runner.tsView on unpkgsrc/shared/config.ts defaults child reviewers to pi with bash enabled.
src/shared/config.tsView on unpkgsrc/shared/report-server.ts opens a localhost report server and browser URL.
src/shared/report-server.tsView on unpkg