Loading npm security reports…
A local control plane for agent CLIs — orchestration and visibility for Claude Code, Codex, Gemini CLI, and more across Git worktrees
Static analysis completed at 93.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.
Package ships high-entropy non-source blobs.
.next/server/app/apple-icon.png.bodyView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
.next/server/app/apple-icon.png.bodyView on unpkgPackage contains source files above the static scanner size ceiling.
.next/server/app/api/worktrees/[id]/marp-render/route.jsView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/commands/start.jsView on unpkgPackage ships high-entropy non-source blobs.
.next/server/app/apple-icon.png.bodyView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
.next/server/app/apple-icon.png.bodyView on unpkgPackage contains source files above the static scanner size ceiling.
.next/server/app/api/worktrees/[id]/marp-render/route.jsView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/commands/start.jsView on unpkg