Loading npm security reports…
XibeCode Core - AI agent engine with tool execution, MCP, memory, and multi-mode support
Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package source references dynamic require/import behavior.
dist/plugins.jsView on unpkg · L3Package source references weak cryptographic algorithms.
dist/memory.jsView on unpkg · L10Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/mcp/oauth-flow.jsView on unpkg · L130Package source references dynamic require/import behavior.
dist/plugins.jsView on unpkg · L3Package source references weak cryptographic algorithms.
dist/memory.jsView on unpkg · L10Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/mcp/oauth-flow.jsView on unpkg · L130