Loading npm security reports…
**ToothFairyAI's AI coding agent** — a command-line interface that brings AI-powered coding assistance to your terminal with deep ToothFairyAI workspace integration.
The npm postinstall hook can retrieve a mutable latest release archive and install its binary payload. It also installs unpinned Python packages into the invoking user's Python environment.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
python/tf_sync/config.pyView on unpkgInstall hook fetches the latest release version and downloads an archive without an integrity check.
postinstall.mjsView on unpkg · L75Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L8Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L8Package ships non-JavaScript build or shell helper files.
python/tf_sync/config.pyView on unpkgInstall hook fetches the latest release version and downloads an archive without an integrity check.
postinstall.mjsView on unpkg · L75