Loading npm security reports…
Common build scripts and files
An explicitly invoked generated build script performs mandatory remote plugin updates and executes project plugin scripts. The downloaded payloads are not pinned or integrity-checked, creating a remote-code execution supply-chain surface.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references child process execution.
files/buildCodeplay/apk-store-builder.jsView on unpkg · L1Package source references dynamic require/import behavior.
scripts/sync-files.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
files/buildCodeplay/codeplayBeforeBuild-6.2.jsView on unpkgPackage source invokes a package manager install command at runtime.
files/buildCodeplay/codeplayBeforeBuild-6.2.jsView on unpkg · L106Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references child process execution.
files/buildCodeplay/apk-store-builder.jsView on unpkg · L1Package source references dynamic require/import behavior.
scripts/sync-files.jsView on unpkg · L1Package source invokes a package manager install command at runtime.
files/buildCodeplay/codeplayBeforeBuild-6.2.jsView on unpkg · L106This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
files/buildCodeplay/codeplayBeforeBuild-6.2.jsView on unpkg