LPM Firewall

Threat feed How it works Policy

Loading npm security reports…

LPM Firewall

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 8 low-signal pattern(s) reviewed.

View on npm All versions

registry / superpowers-controller / 0.1.12

superpowers-controller

@0.1.12

Unofficial stateful workflow controller for the Superpowers methodology on OpenCode.

Static Scan Results

scanned 16h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 1.02 MB of source, external domains: json-schema.org, opencode.ai

Source & flagged code

1 flagged

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 19877 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

Source & flagged code

1 flagged · loading source

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 19877 magicHex = [redacted]

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

Findings

4 Medium4 Low

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/install.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

65%Pass

Verdict confidence

Firewall policyNo policy match

Package metadata

npm

Maintainersgoodjinshan

Version0.1.12

PublishedJul 20, 2026

LicenseMIT

Dependencies6

Integrityverified

Package size233 KB

Files77

Keywordsopencodesuperpowersworkflowpluginagents

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jstypes → ./dist/src/index.d.tsexports mapbin → superpowers-controller

Runtimebun >=1.3.0

Artifact

LPM CLI

1.19 MB · 77 files1 signature(s) · provenance

Install lifecycleNo install hooks · other: build, deploy:superagent, doctor, e2e:opencode +7

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

1 flagged

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 19877 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

superpowers-controller: Clean npm security report (Allow) | LPM Firewall