Loading npm security reports…
Batteries-included agent harness for Claude Code
Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/index.jsView on unpkg · L177Package source references weak cryptographic algorithms.
dist/index.jsView on unpkg · L177Package source invokes a package manager install command at runtime.
dist/cli/index.jsView on unpkg · L25004Package source references a known benign dynamic code generation pattern.
dist/cli/index.jsView on unpkg · L30220Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.claude/install-hooks.shView on unpkgPackage ships non-JavaScript build or shell helper files.
templates/.claude/install-hooks.shView on unpkgSource gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/index.jsView on unpkg · L177Package source references weak cryptographic algorithms.
dist/index.jsView on unpkg · L177Package source invokes a package manager install command at runtime.
dist/cli/index.jsView on unpkg · L25004Package source references a known benign dynamic code generation pattern.
dist/cli/index.jsView on unpkg · L30220Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.claude/install-hooks.shView on unpkgPackage ships non-JavaScript build or shell helper files.
templates/.claude/install-hooks.shView on unpkg