hyn-view@2.1.0
Network-first, ultra-low-overhead terminal system monitor for Ubuntu Server. Pure bash, zero runtime dependencies, themeable, with email/push alerting, daily reports, scheduled speed tests and read-only Highway (hw-os) node tracking.
AI Security Review
scanned 7d ago · by lpm-firewall-aiSource inspection found guarded, package-aligned monitoring setup and no concrete attack behavior. The scanner’s flagged bandwidth script is a stubbed test fixture, not a hidden executable payload.
Decision evidence
public snapshot- The manifest’s postinstall runs the package’s own setup script.
- The hook skips opt-outs and local installs, and proceeds only for a global root install on Linux with systemd.
- The entrypoint dispatches normal monitor commands and invokes setup through the package CLI.
- The flagged bandwidth test stubs its RPC and writes a fixture request under a temporary directory.
- The Highway version check is configuration-gated and validates the fetched version before caching it.
Source & flagged code
10 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe manifest’s postinstall runs the package’s own setup script.
package.jsonView on unpkg · L21Findings
Affected versions and remediation
This report applies to hyn-view@2.1.0.
See all versions of hyn-view for other recorded verdicts.
- Review the evidence and your use of hyn-view@2.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.