Loading npm security reports…
Bridge between IM platforms and AI coding CLIs — one topic, one CLI session with live streaming
A global installation runs a platform binary and changes the user's launcher and shell startup configuration. This is a persistent install-time modification, but it is limited to the package's own command.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe package runs a postinstall script automatically.
package.jsonView on unpkg · L61A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/install-path-entry.mjs#virtual:normalized:round1View on unpkgOn global installs, the script executes a resolved platform binary with --version.
scripts/postinstall-bin.mjsView on unpkg · L265The lifecycle script creates or replaces a launcher under the user's home directory.
scripts/postinstall-bin.mjsView on unpkg · L287This report applies to botmux@3.20.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L62The package runs a postinstall script automatically.
package.jsonView on unpkg · L61A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/install-path-entry.mjs#virtual:normalized:round1View on unpkgOn global installs, the script executes a resolved platform binary with --version.
scripts/postinstall-bin.mjsView on unpkg · L265The lifecycle script creates or replaces a launcher under the user's home directory.
scripts/postinstall-bin.mjsView on unpkg · L287