npm JavaScript analyzed 0.19.7

phonton-cli

v0.19.7
npm

Local-first ADE CLI for planned, verified, reviewable code changes.

maintainer
mattbaconz
licence
MIT OR Apache-2.0
first seen
2026-06-02
last seen
2026-06-09
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v0.19.7 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3

filesystem 3

  • fs package/npm/bin/phonton.js :3 const fs = require("fs");
  • fs package/npm/install.js :3 const fs = require("fs");
  • fs (weak) package/npm/test-wrapper.js :3 const fs = require("fs");

shell / exec 3

  • shell package/npm/bin/phonton.js :5 const { spawn, spawnSync } = require("child_process");
  • shell package/npm/install.js :7 const { spawnSync } = require("child_process");
  • shell (weak) package/npm/test-wrapper.js :5 const { spawnSync } = require("child_process");

network 1

  • net package/npm/install.js :4 const https = require("https");

install hooks 1

  • postinstall package/package.json :19 node npm/install.js

declared dependencies 2

  • @playwright/test@^1.60.0
  • playwright@^1.60.0