Loading npm security reports…
CodeWhale utility commands: session history, tool listing, file snapshot, interactive code quiz — global install
LPM treats this as warn-only first-party agent extension lifecycle risk. Install-time code mutates the package-aligned CodeWhale agent extension surface. It installs skills under the user's CodeWhale directory and injects workspace instructions in the npm caller's project.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L21Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L21