Loading npm security reports…
A self-custodial, JS Bitcoin wallet + Lightning Network management library.
Static analysis flagged 11 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package source references dynamic require/import behavior.
dist/transaction/index.jsView on unpkg · L29Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgPackage declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/cli.jsView on unpkgPackage source references dynamic require/import behavior.
dist/transaction/index.jsView on unpkg · L29This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/cli.jsView on unpkgTarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg · L9Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkg · L9