Loading npm security reports…
WebWork abilities for opencode
LPM flags this version as an AI-agent control-surface risk. Installation automatically changes persistent user environment configuration for OpenCode. It redirects OpenCode's configuration directory to this package and enables an experimental tool.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe package registers an automatic postinstall hook.
package.jsonView on unpkg · L57Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
skills/pytest/references/src/pytest-sample/UserService.pyView on unpkgThe postinstall hook persistently sets OPENCODE_CONFIG_DIR to the package directory.
scripts/postinstall.jsView on unpkg · L37This report applies to @wwkit/harness@1.0.31.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L58Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L58The package registers an automatic postinstall hook.
package.jsonView on unpkg · L57Package ships non-JavaScript build or shell helper files.
skills/pytest/references/src/pytest-sample/UserService.pyView on unpkgThe postinstall hook persistently sets OPENCODE_CONFIG_DIR to the package directory.
scripts/postinstall.jsView on unpkg · L37