PkgRadar

npm · registry.npmjs.org

@abdoknbgit/tau

Install-time lifecycle script: preinstall="node scripts/preinstall.mjs"

Why PkgRadar flagged 0.92.7

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspreinstall added in 0.92.7 vs 0.92.5: "node scripts/preinstall.mjs" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.92.7High risk502026-06-13
0.92.5Review32026-06-07
0.92.4Review52026-06-07
0.92.3Review32026-06-07
0.92.2Review32026-06-07
0.91.0Review52026-06-05
0.9.99Review52026-06-05
0.9.98Review32026-06-05
0.9.96Review32026-06-03
0.9.97Review32026-06-03
0.9.95Review32026-06-03
0.9.91Review52026-05-29
0.9.9Review32026-05-29
0.9.8Review52026-05-29
0.9.7Review32026-05-29
0.9.3Review102026-05-28
0.9.4Review102026-05-28
0.9.0Review102026-05-27
0.9.2Review102026-05-27

Block this in CI

PkgRadar gates @abdoknbgit/tau (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @abdoknbgit/[email protected]