Loading npm security reports…
[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.
LPM treats this as warn-only first-party agent extension lifecycle risk. Loading the declared Pi extension creates package-owned state and tracks assistant usage. For MiniMax turns with configured or existing authentication, it can automatically retrieve quota data from the MiniMax service. No unconsented install-time execution or foreign AI-agent control-surface mutation was found.
Package source references a known benign dynamic code generation pattern.
harness/e2e/playwright-runner.tsView on unpkg · L169Package source references dynamic require/import behavior.
packages/mcp-adapter/dist/server.jsView on unpkg · L144This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
packages/generic-web-plugin/dist/analyzer.jsView on unpkgHardcoded password in packages/prompt-compiler/test/prompt-compiler.test.ts
packages/prompt-compiler/test/prompt-compiler.test.tsView on unpkg · L311Package source references a known benign dynamic code generation pattern.
harness/e2e/playwright-runner.tsView on unpkg · L169This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
packages/generic-web-plugin/dist/analyzer.jsView on unpkgPackage source references dynamic require/import behavior.
packages/mcp-adapter/dist/server.jsView on unpkg · L144Hardcoded password in packages/prompt-compiler/test/prompt-compiler.test.ts
packages/prompt-compiler/test/prompt-compiler.test.tsView on unpkg · L311