Loading npm security reports…
Vantaloom local runtime for darwin-arm64.
Static analysis completed at 93.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.
Package source references dynamic require/import behavior.
web/_next/static/chunks/a97a5cda6e9df469.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
cli/src/lib/lifecycle.mjsView on unpkgSource writes installer persistence such as shell profile or service configuration.
cli/src/lib/lifecycle.mjsView on unpkg · L6Package contains source files above the static scanner size ceiling.
web/_next/static/chunks/9c427948918b23e4.jsView on unpkgPackage source references dynamic require/import behavior.
web/_next/static/chunks/a97a5cda6e9df469.jsView on unpkg · L1Package contains source files above the static scanner size ceiling.
web/_next/static/chunks/9c427948918b23e4.jsView on unpkgSource writes installer persistence such as shell profile or service configuration.
cli/src/lib/lifecycle.mjsView on unpkg · L6This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
cli/src/lib/lifecycle.mjsView on unpkg