@tokenharbor/halyard@0.1.3: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@tokenharbor/halyard@0.1.3: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/rebrand.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/rebrand.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

29"scripts": { "postinstall": "node bin/rebrand.mjs || true" }

Low

Suspicious Lifecycle Evidence

postinstall rewrites human-readable branding and a dependency favicon.

package.jsonView on unpkg · L29

bin/halyard.mjsView file

13L14: import { spawn } from "node:child_process"; L15: import { existsSync, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/halyard.mjsView on unpkg · L13

bin/auth.mjsView file

10L11: import { spawn } from "node:child_process"; L12: import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs"; ... L14: L15: const API_BASE = process.env.HALYARD_API_BASE ?? "https://tokenharbor.ai"; L16:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/auth.mjsView on unpkg · L10

bin/rebrand.mjsView file

103// `dist` holds the built browser app; `lib` holds the server-side code. for (const pkg of readdirSync(vendor)) { const roots = ["lib", "dist"].map((d) => join(vendor, pkg, d)); for (const file of roots.flatMap((r) => [...textFiles(r)])) { let text; try { text = readFileSync(file, "utf8"); } catch { continue; } let out = text; for (const [from, to] of RENAMES) { if (out.includes(from)) { out = out.split(from).join(to); } } if (out !== text) { // Count occurrences for the summary line, cheaply. for (const [from] of

Low

Suspicious Lifecycle Evidence

postinstall rewrites human-readable branding and a dependency favicon.

bin/rebrand.mjsView on unpkg · L103

Source & flagged code

6 flagged

package.jsonView file

Lines 9-33json

9 "files": [

10 "bin",

11 "profile",

12 "README.md",

13 "assets"

14 ],

15 "engines": {

16 "node": ">=20"

17 },

18 "dependencies": {

19 "@deepseek-ai/dsh": "0.1.0-rc.6"

20 },

21 "keywords": [

22 "agent",

23 "harness",

24 "ai",

25 "coding-agent",

26 "token-harbor"

27 ],

28 "license": "MIT",

29 "scripts": {

30 "postinstall": "node bin/rebrand.mjs || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L30

31 }

Low

Suspicious Lifecycle Evidence

postinstall rewrites human-readable branding and a dependency favicon.

package.jsonView on unpkg · L29

32}

33

bin/halyard.mjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2// Halyard — the launcher.

3//

4// It resolves dsh, hands it our overlay, and gets out of the way. There is

5// deliberately no copy of any upstream file in this repo: the overlay reaches

6// dsh through its own `--patch` flag, which is applied after every bundle

7// layer. Upgrading Halyard to a new DeepSeek Harness is a version bump in

8// package.json, with no merge to perform, because we never edited their tree.

9//

10// The home directory is `~/.halyard`, not `~/.dsh`. Someone who already runs

bin/auth.mjsView file

Lines 1-30javascript

1// Browser sign-in for Halyard.

2//

3// Nobody should have to find a key, copy it, and remember which shell syntax

4// exports an environment variable on their platform. They run `halyard`, a

5// browser opens, they approve, and the key is stored for next time.

6//

7// The flow is the gateway's existing device-code endpoints — the same three

8// calls the old terminal client used. Nothing new server-side: POST an init to

9// get a URL and a session id, open the URL, poll until the person approves.

10

11

bin/rebrand.mjsView file

Lines 83-123javascript

83 for (const e of entries) {

84 const full = join(dir, e.name);

85 if (e.isDirectory()) {

86 yield*