Loading npm security reports…
A no-build web component framework specification — scaffold, validate, and evolve spec-compliant projects
No confirmed malicious attack surface is established. Child-process and file-write behavior is tied to explicit CLI scaffold, check, watch, build, and release workflows.
Package contains a critical-looking secret pattern.
templates/shared/.envView on unpkg · L6Package source references child process execution.
lib/spec-i18n-locales.jsView on unpkg · L6Package source references dynamic require/import behavior.
lib/check.jsView on unpkg · L29Package source invokes a package manager install command at runtime.
templates/shared/scripts/test.jsView on unpkg · L46This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
lib/server-proc.jsView on unpkgPackage contains a critical-looking secret pattern.
templates/shared/.envView on unpkg · L6Package source references child process execution.
lib/spec-i18n-locales.jsView on unpkg · L6This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
lib/server-proc.jsView on unpkgPackage source references dynamic require/import behavior.
lib/check.jsView on unpkg · L29Package source invokes a package manager install command at runtime.
templates/shared/scripts/test.jsView on unpkg · L46