Loading npm security reports…

Passed — safe to install

No malicious behavior detected. 6 low-signal pattern(s) reviewed.

registry / annotron / 1.0.0

annotron@1.0.0

Human-in-the-loop review editor for AI agents. Point-and-click annotate HTML/Markdown artifacts, send structured feedback to Claude Code, watch the integrated agent loop auto-apply changes live via loop engineering, browse outline navigation for docs, the

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 74.3 KB of source

Source & flagged code

1 flagged

hooks/annotron-hook.shView file

•path = hooks/annotron-hook.sh kind = build_helper sizeBytes = 1670 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/annotron-hook.shView on unpkg

Source & flagged code

1 flagged · loading source

hooks/annotron-hook.shView file

•path = hooks/annotron-hook.sh kind = build_helper sizeBytes = 1670 magicHex = [redacted]

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/annotron-hook.shView on unpkg

Findings

4 Medium2 Low

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperhooks/annotron-hook.sh

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

65%Pass

Verdict confidence

Firewall policyNo policy match

Package metadata

npm

AuthorMeii

Maintainersmaikatie

Version1.0.0

PublishedJul 18, 2026

LicenseMIT

Dependencies2

Integrityverified

Package size54.8 KB

Files12

Keywordsclaudeclaude-codeanthropicclaude-pluginhtmlartifactsmarkdownannotation

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsbin → annotron

Runtimenode >=18

Artifact

LPM CLI

207 KB · 12 files

1 signature(s)

Install lifecycleNo scripts declared.

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellHighEntropyStringsManifest: clean

Source & flagged code

1 flagged

hooks/annotron-hook.shView file

•path = hooks/annotron-hook.sh kind = build_helper sizeBytes = 1670 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/annotron-hook.shView on unpkg

annotron: Clean npm security report (Allow) | LPM Firewall