Loading npm security reports…
Cut your AI coding agent's token usage. MCP server + CLI that turns any codebase into a deterministic code graph and serves Claude Code, Cursor, Codex & Windsurf a ranked, token-budgeted query surface — agents query structure (symbols, imports, call edges
Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkgPackage source references dynamic require/import behavior.
dist/cli.jsView on unpkg · L1075Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L882Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L882Package source references dynamic require/import behavior.
dist/cli.jsView on unpkg · L1075This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg