Loading npm security reports…
Bridge between IM platforms and AI coding CLIs — one topic, one CLI session with live streaming
A global npm installation runs a bundled platform binary and persists a botmux launcher plus a PATH entry. The source limits this behavior to recognized global installations, but it still changes user shell configuration automatically.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe postinstall hook runs automatically on installation.
package.jsonView on unpkg · L61A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/install-path-entry.mjs#virtual:normalized:round1View on unpkgFor global installs, the hook executes a platform binary with the full inherited environment.
scripts/postinstall-bin.mjsView on unpkg · L265The hook writes a launcher and modifies the user's shell startup files to add its directory to PATH.
scripts/postinstall-bin.mjsView on unpkg · L287This report applies to botmux@3.22.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L62The postinstall hook runs automatically on installation.
package.jsonView on unpkg · L61A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/install-path-entry.mjs#virtual:normalized:round1View on unpkgFor global installs, the hook executes a platform binary with the full inherited environment.
scripts/postinstall-bin.mjsView on unpkg · L265The hook writes a launcher and modifies the user's shell startup files to add its directory to PATH.
scripts/postinstall-bin.mjsView on unpkg · L287