Loading npm security reports…
Agent Arcade — voice-driven control for your AI agents (Electron UI + Go API bridge over NDJSON).
Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
studio/dist/studio.jsView on unpkg · L7A single source file combines environment access, network access, and code or shell execution; review context before blocking.
main.jsView on unpkg · L638Package ships non-JavaScript build or shell helper files.
scripts/fetch-wezterm.shView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L36Package source references dynamic require/import behavior.
studio/dist/studio.jsView on unpkg · L7A single source file combines environment access, network access, and code or shell execution; review context before blocking.
main.jsView on unpkg · L638Package ships non-JavaScript build or shell helper files.
scripts/fetch-wezterm.shView on unpkg