iclavue@10.8.17: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

iclavue@10.8.17: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged

package.jsonView file

Lines 55-95json

55 "url": "git+https://github.com/mycode699/clavue.git"

56 },

57 "publishConfig": {

58 "access": "public"

59 },

60 "bundleDependencies": [

61 "@anthropic-ai/sandbox-runtime",

62 "@opentelemetry/api",

63 "@opentelemetry/api-logs",

64 "@opentelemetry/core",

65 "@opentelemetry/resources",

66 "@opentelemetry/sdk-logs",

67 "@opentelemetry/sdk-metrics",

68 "@opentelemetry/sdk-trace-base",

69 "@opentelemetry/semantic-conventions",

70 "ajv",

71 "lru-cache",

72 "qrcode"

73 ],

74 "scripts": {

75 "postinstall": "node scripts/postinstall-pager.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L75

76 "prepublishOnly": "npm run check:pager-native-publish",

77 "build": "npm run check:release && npm pack --dry-run",

78 "build:knowledge": "node scripts/build-project-knowledge.mjs",

79 "vendor:ripgrep": "node scripts/vendor-ripgrep.mjs",

80 "check": "npm run check:quick",

81 "check:fast": "npm run check:types && npm run check:source-purity && npm run check:boundaries && npm run check:architecture-budget && npm run check:ui-protocol-registry && npm run test:fast && npm run check:startup",

82 "check:quick": "npm run validate:repo && npm run check:test-hygiene && npm run check:source-purity && npm run check:boundaries && npm run check:ui-action-allowlist && npm run check:architecture-budget && npm run check:types && npm test && npm run check:test-hygiene && npm run check:pager-ui && npm run check:eval-baseline && npm run test:system-contract",

83 "check:release": "npm run vendor:ripgrep && npm run validate:repo && npm run check:test-hygiene && npm run verify:dist-clean && npm run verify:dist && npm run verify:source-build && npm run check:source-purity && npm run check:boundaries && npm run check:architecture-budget && npm run check:types && npm test && npm run check:test-hygiene && npm run check:pager-release && npm run check:flywheel",

84 "check:hygiene": "npm run validate:repo",

85 "check:test-hygiene": "node scripts/check-test-tmp-hygiene.mjs",

86 "test:clean-tmp": "node scripts/clean-test-tmp.mjs",

87 "check:source-purity": "node scripts/check-source-purity.mjs",

88 "check:boundaries": "node scripts/check-architecture-boundaries.mjs",

89 "check:commits": "node scripts/check-commit-message.mjs --range HEAD~1..HEAD",

90 "check:architecture-budget": "node scripts/check-architecture-budget.mjs",

91 "check:knip": "node scripts/check-knip-baseline.mjs",

92 "check:types": "node scripts/check-types.mjs",

93 "verify:source-build": "node scripts/build-plugin.mjs",

94 "verify:dist-clean": "node scripts/verify-dist-clean.mjs",

95 "rebuild:dist": "CLAVUE_BUILD_TARGET=dist node scripts/build-plugin.mjs && node scripts/build-pager-release.mjs",

dist/provider-command.jsView file

Lines 909-949javascript

909 }

910 }

911 }

912

913 const savedProfile = saveProviderProfile(

914 createSavableCurrentProfile(currentProfile, targetName),

915 {

916 activate:

dist/native/clavue-pager-win32-x64.exeView file

•path = dist/native/clavue-pager-win32-x64.exe kind = native_binary sizeBytes = 4562460 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/clavue-pager-win32-x64.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6417 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

dist/openai-responses-adapter.jsView file

•path = dist/openai-responses-adapter.js kind = oversized_source_file sizeBytes = 2385346 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/openai-responses-adapter.jsView on unpkg

dist/cli.jsView file

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 17412818 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg