Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

francois@0.17.1: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 14 finding(s) warrant review before installing.

View on npm All versions

registry / francois / 0.17.1

francois@0.17.1

Mission control for your Claude Code fleet — installs the Francois desktop app without an installer.

AI Security Review

scanned 14d ago · by lpm-firewall-ai

Postinstall retrieves and installs an opaque native application payload, then creates per-user desktop integration. No AI-agent configuration mutation or credential/data exfiltration was found in the package wrapper.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation runs postinstall.

Impact

Install-time delivery of an externally hosted executable; the payload itself is not available for source inspection.

Mechanism

hashed remote native-payload download, extraction, and per-user OS registration

Rationale

The package is a verified but install-time remote native-payload carrier with explicit platform-protection bypass rationale. Its wrapper shows no concrete malicious chain, but the unavailable executable prevents a clean source-only verdict.

Evidence

package.jsoninstall.jsmanifest.jsonlib/platform.jslib/desktop.jsuninstall.jsbin/francois.jsvendor/~/Applications~/.local/share/applications/francois.desktop~/.local/share/icons/hicolor/128x128/apps/francois.png

Network endpoints1

github.com/antoine-gmnz/francois/releases/download/v0.17.1/

Decision evidence

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

public snapshot

AI called this Suspicious at 84.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

package.json runs install.js as postinstall.
install.js downloads a platform binary during install and extracts it to vendor/.
install.js explicitly describes bypassing SmartScreen/Gatekeeper download markings.
install.js removes macOS quarantine metadata and registers the downloaded app with the desktop OS.

Evidence against

manifest.json pins release filenames and SHA-256 hashes.
install.js verifies the archive hash before extraction.
No credential harvesting, exfiltration, eval, or hidden execution was found in inspected JS.
Desktop writes are scoped to this app's per-user shortcuts, registry entry, or application files.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 5 file(s), 26.9 KB of source, external domains: developer.microsoft.com, github.com

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/francois.jsView file

11L12: const { spawn, spawnSync } = require('node:child_process'); L13: const path = require('node:path');

High

Child Process

Package source references child process execution.

bin/francois.jsView on unpkg · L11

11L12: const { spawn, spawnSync } = require('node:child_process'); L13: const path = require('node:path'); ... L38: function die(message) { L39: process.stderr.write(`\nfrancois: ${message}\n\n`); L40: process.exit(1); ... L49: function warnIfWebView2Missing() { L50: if (process.platform !== 'win32') return; L51: const guid = '{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}'; ... L61: 'francois: the Microsoft Edge WebView2 runtime was not found — the window may fail to open.\n' + L62: ' Install it from https://developer.microsoft.com/microsoft-edge/webview2/\n', L63: );

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/francois.jsView on unpkg · L11

113const npmCmd = process.platform === 'win32' ? 'npm.cmd' : 'npm'; L114: const result = spawnSync(npmCmd, ['uninstall', '-g', pkg.name], { stdio: 'inherit' }); L115: process.exit(result.status === null ? 1 : result.status); ... L125: } L126: die('the app payload is missing — reinstall with `npm i -g francois`.'); L127: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/francois.jsView on unpkg · L113

Findings

4 High4 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/francois.js

HighSandbox Evasion Gated Capabilitybin/francois.js

HighRuntime Package Installbin/francois.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

84%Warn

Verdict confidence

IntentUnknown

TypeStaged Payload Carrier

False-positive riskMedium

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

AuthorAntoine Gimenez

Maintainersyzad

Version0.19.0

PublishedAug 1, 2026

LicenseAGPL-3.0-only

Dependencies0

Integrityverified

Package size16.1 KB

Files9

Keywordsclaudeclaude-codeanthropicterminaltauridesktop

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsbin → francois

Runtimenode >=18os darwin, win32, linux

Artifact36.3 KB · 9 files1 signature(s) · provenance

Install lifecyclepostinstall

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkHighEntropyStringsUrlStringsCopyleftLicense

LPM CLI

Source & flagged code

5 flagged

package.jsonView file

Lines 6-46json

6 "author": "Antoine Gimenez",

7 "homepage": "https://github.com/antoine-gmnz/francois#readme",

8 "repository": {

9 "type": "git",

10 "url": "git+https://github.com/antoine-gmnz/francois.git",

11 "directory": "packaging/npm"

12 },

13 "bugs": "https://github.com/antoine-gmnz/francois/issues",

14 "keywords": [

15 "claude",

16 "claude-code",

17 "anthropic",

18 "terminal",

19 "tauri",

20 "desktop"

21 ],

22 "bin": {

23 "francois": "bin/francois.js"

24 },

25 "scripts": {

26 "postinstall": "node install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L26

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L26

27 "preuninstall": "node uninstall.js"

28 },

29 "files": [

30 "assets/icon.png",

31 "bin/",

32 "lib/desktop.js",

33 "lib/platform.js",

34 "install.js",

35 "uninstall.js",

36 "manifest.json",

37 "README.md"

38 ],

39 "engines": {

40 "node": ">=18"

41 },

42 "os": [

43 "darwin",

44 "win32",

45 "linux"

46 ]

bin/francois.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2'use strict';

3

4/**

5 * `francois` — launch the desktop app that install.js unpacked into vendor/.

6 *

7 * Unrecognised arguments are forwarded to the app binary, so this stays

8 * forward-compatible with the read-only CLI companion (specs/cli-companion.md)

9 * once that ships.

10 */

11

12

const { spawn, spawnSync } = require('node:child_process');

13const path = require('node:path');

High

Child Process

Package source references child process execution.

bin/francois.jsView on unpkg · L11

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/francois.jsView on unpkg · L11

14

15const desktop = require('../lib/desktop.js');

16const {

17 assetKey,

18 readInstallRecord,

19 readManifest,

20 resolveExecutable,

21 supportedList,

22} = require('../lib/platform.js');

23

24const USAGE = `francois — mission control for your Claude Code fleet

25

26Usage

27 francois launch the app (returns to the shell immediately)

28 francois --attach launch it in the foreground, keeping its output attached

29 francois --version print the app + package versions

30 francois shortcut re-register the Start Menu / Launchpad / menu entry

31 francois shortcut --remove unregister it

Lines 93-133javascript

93

94 const { notes } = desktop.install(record);

95 for (const note of notes) process.stdout.write(`francois: ${note}\n`);

96 return;

97 }

98

99 // Current npm (v7+) never runs preuninstall/postuninstall for `npm uninstall

100 // -g` — a long-standing, unfixed npm regression — so uninstall.js's preuninstall

101 // hook (still useful under yarn/pnpm, which do honor it) cannot be relied on

102 // with npm. This is the reliable path: remove the desktop entry (and, on

103 // macOS, the ~/Applications bundle) while the install record still exists,

104 // THEN hand off to npm — after which the record and this very script are gone.

105 if (argv[0] === 'uninstall') {

106 const record = readInstallRecord();

107 if (record) {

108 desktop.remove(record);

109 process.stdout.write(`francois: removed the ${record.productName} shortcut.\n`);

110 }

111 const pkg = require('../package.json');

112 process.stdout.write('francois: removing the npm package…\n');

113 const npmCmd = process.platform === 'win32' ? 'npm.cmd' : 'npm';

114 const result = spawnSync(npmCmd, ['uninstall', '-g', pkg.name], { stdio: 'inherit' });

115 process.exit(result.status === null ? 1 : result.status);

116 }

117

118 const executable = resolveExecutable();

119 if (!executable) {

120 if (!assetKey()) {

121 die(

122 `no prebuilt app for ${process.platform}/${process.arch} (published: ${supportedList()}).\n` +

123 'Build from source: https://github.com/antoine-gmnz/francois#build-from-source',

124 );

125 }

126 die('the app payload is missing — reinstall with `npm i -g francois`.');

127 }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/francois.jsView on unpkg · L113

128

129 warnIfWebView2Missing();

130

131 const attach = argv[0] === '--attach';

132 const forwarded = attach ? argv.slice(1) : argv;

133