Loading npm security reports…
SumanMovies - Terminal Movie & TV Streaming Experience
Installing the package automatically downloads and stages unsigned native executables, and may install system media dependencies. The staged SumanMovies executable is launched when the user runs the CLI.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.
package.jsonView on unpkg · L3A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source invokes a package manager install command at runtime.
lib/installer.jsView on unpkg · L436This report applies to sumanmovies@1.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.
package.jsonView on unpkg · L3Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L13Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L13A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgPackage source references child process execution.
bin/sumanmovies.jsPackage source invokes a package manager install command at runtime.
lib/installer.jsView on unpkg · L436