Package Health/@mariozechner/pi-coding-agent

@mariozechner/pi-coding-agent

Coding agent CLI with read, bash, edit, write tools and session management

Latest 0.73.1

NPM

20%

Total Score

Maintainer Stability

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecation

The entire package is marked deprecated, with npm directing users to @earendil-works/pi-coding-agent; this creates a clear adoption and continuity risk despite the active project behind it.

Vulnerabilities

Title	Versions	Severity
CVE-2026-54327 @mariozechner/pi-coding-agent is vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition in versions 0.28.0 - 0.73.1.	0.28.0 - 0.73.1	Low
CVE-2026-54326 @mariozechner/pi-coding-agent is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.27.5 - 0.73.1.	0.27.5 - 0.73.1	Low
AIKIDO-2026-10677 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @mariozechner/pi-coding-agent is vulnerable to Cross-Site Scripting (XSS) in versions 0.31.0 - 0.70.5.	0.31.0 - 0.70.5	Medium