Loading npm security reports…
Claude Code CLI with Termux/Android compatibility fixes - a wrapper that patches issues with Sharp, ripgrep, and path resolution on ARM64 Android
LPM treats this as warn-only first-party agent extension lifecycle risk. On Termux, installation downloads and installs fallback binaries into the Claude Code dependency. Running the CLI also automatically queries npm and may replace the global package with the registry's latest release.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
bin/claude-termux.jsView on unpkg · L15A single source file combines environment access, network access, and code or shell execution; review context before blocking.
src/auto-update.jsView on unpkg · L2Package source invokes a package manager install command at runtime.
src/auto-update.jsView on unpkg · L93Package ships non-JavaScript build or shell helper files.
scripts/download-ripgrep.shView on unpkgThis report applies to claude-code-termux@1.0.160.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L27Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L27Package ships non-JavaScript build or shell helper files.
scripts/download-ripgrep.shView on unpkgPackage source references dynamic require/import behavior.
bin/claude-termux.jsView on unpkg · L15A single source file combines environment access, network access, and code or shell execution; review context before blocking.
src/auto-update.jsView on unpkg · L2Package source invokes a package manager install command at runtime.
src/auto-update.jsView on unpkg · L93