Loading npm security reports…
**ToothFairyAI's AI coding agent** — a command-line interface that brings AI-powered coding assistance to your terminal with deep ToothFairyAI workspace integration.
Npm installation retrieves a mutable remote binary archive and installs unpinned Python packages automatically. Neither remote artifact has an integrity check in the inspected hook.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgAn automatic postinstall hook runs on npm installation.
package.jsonView on unpkg · L7Package ships non-JavaScript build or shell helper files.
python/tf_sync/config.pyView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/tfcode.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L8Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L8An automatic postinstall hook runs on npm installation.
package.jsonView on unpkg · L7Package ships non-JavaScript build or shell helper files.
python/tf_sync/config.pyView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/tfcode.jsView on unpkg