Loading npm security reports…
EMP CLI - coding agent with full-screen TUI (ink, clickable tool output, mouse, plan mode, markdown, vision) and 18 providers. Runs great on any light PC / weak CPU / old motherboard. Sessions, context, effort, web search, background tasks, revert.
Static analysis completed at 0.0% confidence. No malicious behavior was detected; 20 low-signal pattern(s) were surfaced and cleared.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/emp.jsView on unpkgSource exposes local file and command tools to a remote model endpoint.
bin/emp.jsView on unpkg · L7A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/emp.jsView on unpkgPackage source references dynamic require/import behavior.
bin/emp.jsView on unpkg · L5Source downloads or fetches remote code and executes it.
lib/tools.jsView on unpkg · L4A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
lib/tools.jsView on unpkg · L4Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L17Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L17Package source references dynamic require/import behavior.
bin/emp.jsView on unpkg · L5Source exposes local file and command tools to a remote model endpoint.
bin/emp.jsView on unpkg · L7This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/emp.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/emp.jsView on unpkgSource downloads or fetches remote code and executes it.
lib/tools.jsView on unpkg · L4A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
lib/tools.jsView on unpkg · L4