Loading npm security reports…
Pi extension and CLI for controlling visible interactive Pi sessions over a structured Unix-socket side channel.
Static analysis flagged 10 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
extensions/event-history.tsView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
tests/slash-dispatch.test.tsView on unpkgThis report applies to @vanillagreen/pi-session-bridge@2.0.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L29Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L29A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
extensions/event-history.tsView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
tests/slash-dispatch.test.tsView on unpkg