Loading npm security reports…
Weave CLI — `weave build`, `weave dev` (watch + live-reload), `weave check`, `weave routes`.
Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/cli.jsView on unpkg · L6112Package source references a known benign dynamic code generation pattern.
dist/cli.jsView on unpkg · L4586Package source references dynamic require/import behavior.
bin/weave.mjsView on unpkg · L32Package source references a known benign dynamic code generation pattern.
dist/cli.jsView on unpkg · L4586Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/cli.jsView on unpkg · L6112Package source references dynamic require/import behavior.
bin/weave.mjsView on unpkg · L32