Loading npm security reports…
A typed, token-efficient language + runtime for agentic trading: agents author bounded plans, the runtime fires them at the tick. CLI + typed library + MCP server.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Package source references dynamic require/import behavior.
bin/kestrel.cjsView on unpkg · L63This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/register-cfhdphyy.jsView on unpkgPackage source references dynamic require/import behavior.
bin/kestrel.cjsView on unpkg · L63This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/register-cfhdphyy.jsView on unpkg