Loading npm security reports…
LeanCTX — the Context OS for AI coding agents. One local binary that compresses, remembers, routes, and verifies every token between your code and the model. No Rust required.
Static analysis flagged 10 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgInstall-named source file stages remote content through filesystem writes and execution.
postinstall.jsView on unpkg · L3This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
postinstall.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L30Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L30Install-named source file stages remote content through filesystem writes and execution.
postinstall.jsView on unpkg · L3This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
postinstall.jsView on unpkg