Loading npm security reports…
A fork of oh-my-openagent
LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time behavior is present. When OpenCode loads the configured plugin, it self-migrates its own legacy plugin configuration and may add its matching TUI plugin entry. An enabled CodeGraph feature can download a checksum-pinned tool and execute it for the active project.
Package source references dynamic require/import behavior.
dist/skills/ultimate-browsing/engine/templates/playwright_mobile_chrome.jsView on unpkg · L56Package ships non-JavaScript build or shell helper files.
dist/skills/ast-grep/install.shView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
dist/skills/ast-grep/tests/smoke.ps1View on unpkgPackage contains source files above the static scanner size ceiling.
dist/index.jsView on unpkgPackage source references dynamic require/import behavior.
dist/skills/ultimate-browsing/engine/templates/playwright_mobile_chrome.jsView on unpkg · L56Package ships non-JavaScript build or shell helper files.
dist/skills/ast-grep/install.shView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
dist/skills/ast-grep/tests/smoke.ps1View on unpkgPackage contains source files above the static scanner size ceiling.
dist/index.jsView on unpkg