Loading npm security reports…
**ToothFairyAI's AI coding agent** — a command-line interface that brings AI-powered coding assistance to your terminal with deep ToothFairyAI workspace integration.
During npm install, the package fetches a mutable latest release and stages its binary in bin/. It also installs Python packages through pip with system-package protections bypassed.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgnpm postinstall invokes a networked installer.
package.jsonView on unpkg · L7Package ships non-JavaScript build or shell helper files.
python/tf_sync/config.pyView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L8Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L8npm postinstall invokes a networked installer.
package.jsonView on unpkg · L7Package ships non-JavaScript build or shell helper files.
python/tf_sync/config.pyView on unpkg