Loading npm security reports…
Agent-board dashboard for Pi: dispatch, monitor, peek/reply, and attach to background Pi sessions.
Installing the package runs a postinstall hook that replaces dependencies nested under the Pi agent package. It invokes npm during installation and mutates the consumer dependency tree.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references child process execution.
runner/state-runner.mjsView on unpkg · L8Package source references weak cryptographic algorithms.
src/core/auto-state.mjsView on unpkg · L25Package source invokes a package manager install command at runtime.
scripts/patch-vulns.mjsView on unpkg · L46This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/ui/pty-attach.tsView on unpkgThis report applies to @zhuxixi/pi-agent-board@0.7.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L54This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/ui/pty-attach.tsView on unpkgPackage source references child process execution.
runner/state-runner.mjsView on unpkg · L8Package source references weak cryptographic algorithms.
src/core/auto-state.mjsView on unpkg · L25Package source invokes a package manager install command at runtime.
scripts/patch-vulns.mjsView on unpkg · L46