npm JavaScript analyzed 3.0.0-alpha.7 unconfirmed MCP

@claude-flow/hooks

v3.0.0-alpha.7
npm

V3 Hooks System - Event-driven lifecycle hooks with ReasoningBank learning integration

maintainer
ruvnet
license
MIT
first seen
2026-06-09
last seen
2026-08-12
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v3.0.0-alpha.7 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 36

filesystem 3

  • fs package/dist/cli/guidance-cli.js :19 import { readFileSync } from 'fs';
  • fs package/dist/statusline/index.js :15 import { existsSync, readFileSync, statSync, readdirSync } from 'fs';
  • fs package/dist/workers/index.js :10 import * as fs from 'fs/promises';

shell / exec 3

  • shell package/dist/reasoningbank/index.js :743 const { execFileSync } = await import('child_process');
  • shell package/dist/statusline/index.js :14 import { execSync } from 'child_process';
  • shell package/dist/workers/index.js :926 const { exec } = await import('child_process');

declared dependencies 9

  • @claude-flow/memory@^3.0.0-alpha.2
  • @claude-flow/neural@^3.0.0-alpha.2
  • @claude-flow/shared@^3.0.0-alpha.1
  • zod@^3.23.0
  • @types/better-sqlite3@^7.6.11
  • @types/node@^20.10.0
  • typescript@^5.3.0
  • vitest@^4.0.16
  • better-sqlite3@^11.0.0

obfuscation 1

  • dynamic require()/import() package/dist/workers/session-hook.js :124 const { onSessionStart, formatSessionStartOutput } = require('\${HOOKS_PATH}/dist/workers/session-hook.js');