PkgRadar

npm · registry.npmjs.org

@ada-mcp/mcp-server

Install-time lifecycle script: preinstall="node scripts/preinstall-registry.mjs"

Why PkgRadar flagged 0.1.5

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspreinstall added in 0.1.5 vs 0.1.4: "node scripts/preinstall-registry.mjs" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.5High risk452026-06-10
0.1.87Review52026-06-09
0.1.86Review32026-06-09
0.1.85Review32026-06-09
0.1.84Review112026-06-08
0.1.83Review112026-06-08
0.1.82Review172026-06-05
0.1.81Review112026-06-05
0.1.80Review112026-06-05
0.1.79Review32026-06-05
0.1.78Review32026-06-05
0.1.77Review32026-06-05
0.1.76Review32026-06-05
0.1.75Review32026-06-05
0.1.74Review32026-06-05
0.1.73Review32026-06-05
0.1.71Review32026-06-04
0.1.72Review32026-06-04
0.1.64Review32026-06-04
0.1.63Review52026-06-04
0.1.62Review32026-06-04
0.1.60Review32026-06-04
0.1.61Review32026-06-04
0.1.59Review52026-06-04
0.1.58Review32026-06-04
0.1.57Review32026-06-04
0.1.56Review32026-06-04
0.1.55Review32026-06-04
0.1.54Review32026-06-04
0.1.53Review32026-06-03
0.1.52Review52026-05-28
0.1.50Review172026-05-27
0.1.51Review172026-05-27
0.1.39Review172026-05-26
0.1.40Review172026-05-26
0.1.27Review172026-05-26
0.1.25Review252026-05-26
0.1.26Review252026-05-26
0.1.24Review252026-05-26
0.1.23Review252026-05-26
0.1.22Review252026-05-26
0.1.21Review252026-05-26
0.1.20Review252026-05-26
0.1.19Review252026-05-25
0.1.17Review252026-05-25
0.1.18Review252026-05-25
0.1.6Review152026-05-25
0.1.2Review52026-05-25
0.1.3Review52026-05-25
0.1.1Review52026-05-25
0.1.0Review52026-05-25

Block this in CI

PkgRadar gates @ada-mcp/mcp-server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ada-mcp/[email protected]