Unclear The finding does not say whether plugin authors can use this library in this build.
The runtime for plugin function hooks has a new state library. Plugin function hooks are code a plugin runs at certain points in Claude Code. Modules import the library from "claude-code", and it provides:
Updates are compare-and-set: a value is written only if nothing else changed it since it was read. After a limited number of tries, an update gives up with "nothing was written".
A scan checks each module's code without running it and lists which state keys the module reads and writes. It rejects code it cannot follow this way, with errors saying the function "takes a source the scan can read".
Plugin hook code gets a shared way to keep state that knows up front which values each module touches. Code that uses the library must be written so the scan can read it, or it is refused.
The finding does not say whether plugin authors can use this library in this build.