Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

francois@0.15.0: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 14 finding(s) warrant review before installing.

View on npm All versions

registry / francois / 0.15.0

francois@0.15.0

Mission control for your Claude Code fleet — installs the Francois desktop app without an installer.

AI Security Review

scanned 16d ago · by lpm-firewall-ai

Postinstall fetches, verifies, unpacks, and registers an external desktop payload. The downloaded binary is not included for source inspection; macOS quarantine is explicitly removed.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install

Impact

A pinned but externally hosted binary gains a desktop launcher and may run when launched by the user.

Mechanism

remote binary staging with per-user desktop integration

Rationale

The package is an explicit remote desktop-binary installer with security-control-bypass behavior, creating unresolved supply-chain risk. Source does not establish a concrete malicious chain, so blocking is not justified.

Evidence

package.jsoninstall.jsmanifest.jsonlib/desktop.jsuninstall.jsbin/francois.jsREADME.mdvendor/

Network endpoints1

github.com

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Evidence for warning

package.json runs postinstall install.js.
install.js downloads an external platform binary during install.
install.js removes macOS com.apple.quarantine recursively.
lib/desktop.js persists per-user desktop launchers/registry entries.

Evidence against

manifest.json pins release asset names and SHA-256 digests.
No source evidence of credential harvesting or data exfiltration.
No Claude/Codex config or broad agent-control writes found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 5 file(s), 26.9 KB of source, external domains: developer.microsoft.com, github.com

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/francois.jsView file

11L12: const { spawn, spawnSync } = require('node:child_process'); L13: const path = require('node:path');

High

Child Process

Package source references child process execution.

bin/francois.jsView on unpkg · L11

11L12: const { spawn, spawnSync } = require('node:child_process'); L13: const path = require('node:path'); ... L38: function die(message) { L39: process.stderr.write(`\nfrancois: ${message}\n\n`); L40: process.exit(1); ... L49: function warnIfWebView2Missing() { L50: if (process.platform !== 'win32') return; L51: const guid = '{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}'; ... L61: 'francois: the Microsoft Edge WebView2 runtime was not found — the window may fail to open.\n' + L62: ' Install it from https://developer.microsoft.com/microsoft-edge/webview2/\n', L63: );

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/francois.jsView on unpkg · L11

113const npmCmd = process.platform === 'win32' ? 'npm.cmd' : 'npm'; L114: const result = spawnSync(npmCmd, ['uninstall', '-g', pkg.name], { stdio: 'inherit' }); L115: process.exit(result.status === null ? 1 : result.status); ... L125: } L126: die('the app payload is missing — reinstall with `npm i -g francois`.'); L127: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/francois.jsView on unpkg · L113

Findings

4 High4 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/francois.js

HighSandbox Evasion Gated Capabilitybin/francois.js

HighRuntime Package Installbin/francois.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

88%Warn

Verdict confidence

IntentDangerous Capability

TypeStaged Payload Carrier

False-positive riskMedium

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

AuthorAntoine Gimenez

Maintainersyzad

Version0.19.0

PublishedJul 30, 2026

LicenseAGPL-3.0-only

Dependencies0

Integrityverified

Package size16.1 KB

Files9

Keywordsclaudeclaude-codeanthropicterminaltauridesktop

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsbin → francois

Runtimenode >=18os darwin, win32, linux

Artifact36.3 KB · 9 files1 signature(s) · provenance

Install lifecyclepostinstall

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkHighEntropyStringsUrlStringsCopyleftLicense

LPM CLI

Source & flagged code

5 flagged

package.jsonView file

Lines 6-46json

6 "author": "Antoine Gimenez",

7 "homepage": "https://github.com/antoine-gmnz/francois#readme",

8 "repository": {

9 "type": "git",

10 "url": "git+https://github.com/antoine-gmnz/francois.git",

11 "directory": "packaging/npm"

12 },

13 "bugs": "https://github.com/antoine-gmnz/francois/issues",

14 "keywords": [

15 "claude",

16 "claude-code",

17 "anthropic",

18 "terminal",

19 "tauri",

20 "desktop"

21 ],

22 "bin": {

23 "francois": "bin/francois.js"

24 },

25 "scripts": {

26 "postinstall": "node install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L26

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L26

27 "preuninstall": "node uninstall.js"

28 },

29 "files": [

30 "assets/icon.png",

31 "bin/",

32 "lib/desktop.js",

33 "lib/platform.js",

34 "install.js",

35 "uninstall.js",

36 "manifest.json",

37 "README.md"

38 ],

39 "engines": {

40 "node": ">=18"

41 },

42 "os": [

43 "darwin",

44 "win32",

45 "linux"

46 ]

bin/francois.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2'use strict';

3

4/**

5 * `francois` — launch the desktop app that install.js unpacked into vendor/.

6 *

7 * Unrecognised arguments are forwarded to the app binary, so this stays

8 * forward-compatible with the read-only CLI companion (specs/cli-companion.md)

9 * once that ships.

10 */

11

12

const { spawn, spawnSync } = require('node:child_process');

13const path = require('node:path');

High

Child Process

Package source references child process execution.

bin/francois.jsView on unpkg · L11

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/francois.jsView on unpkg · L11

14

15const desktop = require('../lib/desktop.js');

16const {

17 assetKey,

18 readInstallRecord,

19 readManifest,

20 resolveExecutable,

21 supportedList,

22} = require('../lib/platform.js');

23

24const USAGE = `francois — mission control for your Claude Code fleet

25

26Usage

27 francois launch the app (returns to the shell immediately)

28 francois --attach launch it in the foreground, keeping its output attached

29 francois --version print the app + package versions

30 francois shortcut re-register the Start Menu / Launchpad / menu entry

31 francois shortcut --remove unregister it

Lines 93-133javascript

93

94 const { notes } = desktop.install(record);

95 for (const note of notes) process.stdout.write(`francois: ${note}\n`);

96 return;

97 }

98

99 // Current npm (v7+) never runs preuninstall/postuninstall for `npm uninstall

100 // -g` — a long-standing, unfixed npm regression — so uninstall.js's preuninstall

101 // hook (still useful under yarn/pnpm, which do honor it) cannot be relied on

102 // with npm. This is the reliable path: remove the desktop entry (and, on

103 // macOS, the ~/Applications bundle) while the install record still exists,

104 // THEN hand off to npm — after which the record and this very script are gone.

105 if (argv[0] === 'uninstall') {

106 const record = readInstallRecord();

107 if (record) {

108 desktop.remove(record);

109 process.stdout.write(`francois: removed the ${record.productName} shortcut.\n`);

110 }

111 const pkg = require('../package.json');

112 process.stdout.write('francois: removing the npm package…\n');

113 const npmCmd = process.platform === 'win32' ? 'npm.cmd' : 'npm';

114 const result = spawnSync(npmCmd, ['uninstall', '-g', pkg.name], { stdio: 'inherit' });

115 process.exit(result.status === null ? 1 : result.status);

116 }

117

118 const executable = resolveExecutable();

119 if (!executable) {

120 if (!assetKey()) {

121 die(

122 `no prebuilt app for ${process.platform}/${process.arch} (published: ${supportedList()}).\n` +

123 'Build from source: https://github.com/antoine-gmnz/francois#build-from-source',

124 );

125 }

126 die('the app payload is missing — reinstall with `npm i -g francois`.');

127 }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/francois.jsView on unpkg · L113

128

129 warnIfWebView2Missing();

130

131 const attach = argv[0] === '--attach';

132 const forwarded = attach ? argv.slice(1) : argv;

133