Loading npm security reports…
WrongStack WebUI HTTP/WebSocket server module — extracted from @wrongstack/webui in PR #243/244 to remove the CLI -> @wrongstack/webui/server cross-package edge (audit §3.1.1). Pure backend: HTTP routes, WebSocket handlers, MCP tool wrappers, HTML serving
Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L10111Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/server/handlers.jsView on unpkg · L64A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/server/handlers.jsView on unpkg · L64