Loading npm security reports…
Prebuilt TaskHandoff control plane runtime.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkgPackage source references dynamic require/import behavior.
dist/cli.jsView on unpkg · L1Source writes installer persistence such as shell profile or service configuration.
dist/cli.jsView on unpkg · L1Package ships high-entropy non-source blobs.
ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkgPackage source references dynamic require/import behavior.
dist/cli.jsView on unpkg · L1Source writes installer persistence such as shell profile or service configuration.
dist/cli.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkgPackage ships high-entropy non-source blobs.
ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg