Loading npm security reports…
MCP server for the Warp freight API. 26 tools covering the full booking lifecycle: mode compare (one call prices every eligible mode in parallel and returns a decision-complete recommendation with the cost-vs-transit math), quote (van/box-truck/FTL/LTL —
LPM flags this version as an AI-agent control-surface risk. npm postinstall automatically modifies Claude Desktop's MCP configuration to launch this package. The installed MCP process can then read the user's Warp API configuration and make authenticated Warp API calls.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgManifest entrypoint contains risky behavior absent from dist/build output.
scripts/run.mjsView on unpkg · L9Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/postinstall.mjsView on unpkg · L5Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L36Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L36Manifest entrypoint contains risky behavior absent from dist/build output.
scripts/run.mjsView on unpkg · L9Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/postinstall.mjsView on unpkg · L5