Loading npm security reports…
AI advisory board for your codebase — 7 expert advisors assess architecture, product, design, finance, security, privacy, and strategy
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Package source references child process execution.
src/anatomy/handoff.jsView on unpkg · L13Package source references weak cryptographic algorithms.
src/dashboard/lib/holistic-explainer.jsView on unpkg · L122Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
src/anatomy/scanner-anatomy.jsView on unpkg · L971Package source invokes a package manager install command at runtime.
src/lib/skills.jsView on unpkg · L173Package ships high-entropy non-source blobs.
src/dashboard/static/fonts/SourceSerif4-Italic-VariableFont.woff2View on unpkgPackage source references child process execution.
src/anatomy/handoff.jsView on unpkg · L13Package ships high-entropy non-source blobs.
src/dashboard/static/fonts/SourceSerif4-Italic-VariableFont.woff2View on unpkgPackage source references weak cryptographic algorithms.
src/dashboard/lib/holistic-explainer.jsView on unpkg · L122Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
src/anatomy/scanner-anatomy.jsView on unpkg · L971Package source invokes a package manager install command at runtime.
src/lib/skills.jsView on unpkg · L173