npm analyzed 0.164.1

@bilig/headless

v0.164.1

npm

Headless spreadsheet formula engine for Node.js services and agents with WorkPaper JSON persistence and formula readback.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities0 tools

transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signalsnpm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.164.1 · analyzer v17 · 1d ago

code evidencev0.164.1 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs package/dist/formula-clinic-cli.js :1 import { existsSync, readFileSync, statSync } from 'node:fs';
fs package/dist/mcp-challenge-cli.js :1 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs package/dist/work-paper-mcp-file-server.js :5 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
fs package/dist/work-paper-mcp-xlsx-file.js :1 import { existsSync, mkdirSync, renameSync, statSync, writeFileSync } from 'node:fs';
fs package/dist/xlsx-internal/xlsx-export.js :1 import { writeFileSync } from 'node:fs';
fs package/dist/xlsx-internal/xlsx-source-bytes.js :2 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync, statSync, unlinkSync, writeSync } from 'node:fs';
fs package/dist/xlsx-internal/xlsx-source-copy.js :1 import { closeSync, openSync, writeFileSync, writeSync } from 'node:fs';
fs package/dist/xlsx.js :1 import { writeFile } from 'node:fs/promises'

net package/dist/n8n-forecast-server-cli.js :1 import { createServer } from 'node:http';