Loading npm security reports…
Vantaloom local runtime for darwin-arm64.
Static analysis completed at 65.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.
Package source references dynamic require/import behavior.
web/_next/static/chunks/a97a5cda6e9df469.jsView on unpkg · L1Source writes installer persistence such as shell profile or service configuration.
cli/src/lib/lifecycle.mjsView on unpkg · L6Package ships high-entropy non-source blobs.
web/_next/static/media/KaTeX_Size4-Regular.b211e3d3.woffView on unpkgPackage contains source files above the static scanner size ceiling.
web/_next/static/chunks/e2dd7c0323773f20.jsView on unpkgPackage source references dynamic require/import behavior.
web/_next/static/chunks/a97a5cda6e9df469.jsView on unpkg · L1Package ships high-entropy non-source blobs.
web/_next/static/media/KaTeX_Size4-Regular.b211e3d3.woffView on unpkgPackage contains source files above the static scanner size ceiling.
web/_next/static/chunks/e2dd7c0323773f20.jsView on unpkgSource writes installer persistence such as shell profile or service configuration.
cli/src/lib/lifecycle.mjsView on unpkg · L6