barba-js

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/project_setup.py utility uses subprocess.run to execute npm install. This is an expected and standard behavior for a script designed to initialize a JavaScript-based web project and install its dependencies locally.- [EXTERNAL_DOWNLOADS]: The scripts/project_setup.py script facilitates the download of common web development libraries (@barba/core, gsap, and vite) from the official NPM registry, which is a well-known and trusted service.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 05:29 PM