Loading npm security reports…
AI-assisted specification, architecture, and implementation system — spec → architecture → stories → dev → review
LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit codewright init installs package-owned AI-agent skills and guidance into the current project. Explicit hook install also mutates local Git hooks; no install-time execution or exfiltration is present.
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/main.mjsView on unpkgPackage source invokes a package manager install command at runtime.
dist/cli/main.mjsView on unpkg · L1564Package source invokes a package manager install command at runtime.
dist/cli/main.mjsView on unpkg · L1564This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/main.mjsView on unpkg