Setups

venom: dependencies installed clean, install scripts off

Installed clean on 2026-09-13: exit 0, 134 packages, 0 deprecated.

About venom

npm install --ignore-scripts --no-audit --no-fund --no-update-notifier finished with exit 0 in 3 seconds, adding 134 packages.

We cloned the repository at commit 39410a459c37 and ran it under sandbox-exec -- (deny default) after importing the base BSD profile, reads allowed only under the system and toolchain paths and the scratch directory, writes confined to that scratch directory, the environment replaced with env -i, and lifecycle scripts disabled. The user's home directory is on no allow list. Node v26.7.0, npm 11.19.0. We did not run the bot: this is an observation about whether its dependencies resolve on that day, on that toolchain, and nothing more.

Source