npm JavaScript analyzed 2.0.63

@coinbase/cdp-cli

v2.0.63

npm

CLI for the Coinbase Developer Platform API

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v2.0.63 · analyzer v33 · 4w ago

code evidence v2.0.63 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 2

fs (weak) package/scripts/postinstall.mjs :5 import { readFileSync, readdirSync, existsSync, mkdirSync, cpSync } from 'node:fs';

net package/dist/index.js :48 t=setTimeout(()=>e.abort(),3e3),r=await fetch(Ao,{signal:e.signal,headers:{Accept:"application/json"}});return clearTimeout(t),r.ok?(await r.json())?.["dist-tags"]?.latest??null:null}catch{return null

secrets package/dist/index.js :44 `,{mode:384})}function we(e){return ee(`${e}:wallet`)}function St(e,t){return me(`${e}:wallet`,t)}function kt(e){ge(`${e}:wallet`)}function xe(e,t){return t||process.env.CDP_ENV||e.env}function ne(e,t