This repository contains source code that was unintentionally published by Anthropic, PBC through their official npm package. The code was publicly accessible without any access controls, authentication, or encryption. It was extracted from source map files included in a publicly distributed npm package.
- The source was obtained from a publicly available npm package
- No login credentials, API keys, or authentication were required
- No access controls, firewalls, or security measures were bypassed
npm installis a standard, authorized use of the npm registry- The Computer Fraud and Abuse Act (18 U.S.C. Section 1030) requires "unauthorized access" or "exceeding authorized access" — neither applies here
- Source maps are unencrypted, unprotected files shipped inside the npm package
- No DRM, obfuscation, or technological protection measures were circumvented
- Standard, publicly available tools were used to read the source maps
- DMCA Section 1201 anti-circumvention provisions require circumvention of a "technological measure that effectively controls access" — no such measure existed
This repository qualifies for fair use protection based on the four-factor test:
| Factor | Analysis |
|---|---|
| Purpose and character of use | Non-commercial, educational, research, and commentary — all favored uses. The use is transformative (analysis, not redistribution for use). |
| Nature of the copyrighted work | Functional/utilitarian software code, which receives thinner copyright protection than creative works. |
| Amount used | While the full source is included, this is necessary for meaningful security research and architectural analysis. Courts have found full reproduction acceptable when the purpose requires it (e.g., Google v. Oracle, Sega v. Accolade). |
| Market effect | This repository does not substitute for Claude Code. Users cannot run Claude Code from this source alone (requires API access, build tooling, signing, etc.). No market harm. |
Publishing, analyzing, and commenting on publicly available source code is protected speech under the First Amendment, particularly when done for research, education, and public interest purposes.
- This repository does NOT contain any API keys, secrets, tokens, or credentials
- This repository does NOT contain private user data
- This repository does NOT provide instructions for exploiting Anthropic's systems
- Any security-sensitive findings should be reported to Anthropic via their responsible disclosure program
This repository will comply with valid legal requests:
- DMCA takedown notices filed through GitHub's official process will be honored
- Court orders will be complied with
- Anthropic may contact GitHub directly via: https://docs.github.com/en/site-policy/content-removal-policies/dmca-takedown-policy
THIS REPOSITORY IS PROVIDED "AS IS" FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY. THE MAINTAINER MAKES NO WARRANTIES AND ASSUMES NO LIABILITY. USE OF THIS CODE FOR COMMERCIAL PURPOSES, TO BUILD COMPETING PRODUCTS, OR IN VIOLATION OF ANTHROPIC'S INTELLECTUAL PROPERTY RIGHTS IS EXPRESSLY DISCOURAGED AND DONE AT YOUR OWN RISK.
THIS DOCUMENT IS NOT LEGAL ADVICE. CONSULT A QUALIFIED ATTORNEY FOR LEGAL GUIDANCE.