npm JavaScript analyzed 0.1.43

@comment-io/cli

v0.1.43

npm

Comment.io CLI and local notification daemon

maintainer: commentio
license: MIT
first seen: 2026-07-11
last seen: 2026-07-29
releases · 30d: 84
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v0.1.43 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3

filesystem 2

fs package/bin/comment.js :2 import { existsSync } from 'node:fs';
fs package/bin/postinstall.js :4 import { existsSync } from 'node:fs';

shell / exec 2

shell package/bin/comment.js :3 import { spawnSync } from 'node:child_process';
shell package/bin/postinstall.js :3 import { spawnSync } from 'node:child_process';

install hooks 2

prepack package/package.json :52 node ../../scripts/prepare-cli-package.mjs
postinstall package/package.json :53 node bin/postinstall.js