Loading npm security reports…
Instantly share a localhost port over P2P using Iroh
No confirmed malicious attack surface was established by static source inspection. The package is a cargo-dist style binary wrapper that downloads a platform-specific release artifact at install time and runs it when the CLI is invoked.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L30Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L30