Package Under Review
This package is under review. Identity is withheld until findings are confirmed. This is an automated assessment and findings are risk indicators, not confirmed threats.
1 threat detected
Downloads: <1K
pkg-b3BlbmZyYW1l...
npmwarnings detectedSecurity Scan Results
Warnings detected due to potential concerns
CVEs
0
Threats
1
Install Scripts
1
Confirmed Threats (1)
Hardcoded Secrets
confidence: 85%confirmed
Location: .travis.yml:7
slack: openframe-community:zfOODf2VUOEM8uh93Tkdd0k6Install Scripts Detected
install
This package runs scripts during installation. Review these scripts before installing.
brin Recommendations
- →This package has warnings detected. Evaluate the specific concerns before proceeding.
- →1 verified threat pattern detected. Review the specific findings and consider alternatives.
- →Install scripts detected. When using with AI agents, consider running in a sandboxed environment.
This is an automated, point-in-time assessment and may contain errors. Findings are risk indicators, not confirmed threats. Security posture may change over time. Maintainers can dispute findings via the brin review process.
Identity withheld
Pending verification process
Download Range
<1K
Last Scanned
2 days ago
Trust Score
75/100·Legitimacy signals, not safety
Install Scripts
This package has install scripts that run automatically:
install
Capabilities
Process
Spawns child processes