Loading npm security reports…
AgentsWorkStudio runtime bridge service for machine-level agent runtime integration
Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
dist/utils/sdk-package-loader.jsView on unpkg · L69Package source references weak cryptographic algorithms.
dist/routes/instance.jsView on unpkg · L1Source writes installer persistence such as shell profile or service configuration.
dist/services/cli-commands.jsView on unpkg · L1A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/adapter/OpencodeSdkAdapter.jsView on unpkg · L141This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/adapter/OpencodeSdkAdapter.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L37Package source references dynamic require/import behavior.
dist/utils/sdk-package-loader.jsView on unpkg · L69Package source references weak cryptographic algorithms.
dist/routes/instance.jsView on unpkg · L1Source writes installer persistence such as shell profile or service configuration.
dist/services/cli-commands.jsView on unpkg · L1A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/adapter/OpencodeSdkAdapter.jsView on unpkg · L141This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/adapter/OpencodeSdkAdapter.jsView on unpkg