Loading npm security reports…
Ship PRs while you sleep. Merge them with your eyes open. The Wayari software factory from a terminal.
Installing the package automatically registers Wayari as an MCP server with installed coding agents. This changes user-wide or global agent control surfaces without an explicit setup command.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/wayari.mjsView on unpkg · L6817Package source references weak cryptographic algorithms.
dist/wayari.mjsView on unpkg · L12Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/cli-postinstall.mjsView on unpkg · L3This report applies to wayari@0.3.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/wayari.mjsView on unpkg · L6817Package source references weak cryptographic algorithms.
dist/wayari.mjsView on unpkg · L12Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/cli-postinstall.mjsView on unpkg · L3