PkgRadar

npm · registry.npmjs.org

@autofleet/cli

Install Lifecycle Suppresses Failure: postinstall="test -f ./dist/index.js && ./dist/index.js claudeInit || true"

Why PkgRadar flagged 2.29.11

SeveritySignalEvidence
highInstall Lifecycle Suppresses Failurepostinstall="test -f ./dist/index.js && ./dist/index.js claudeInit || true" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
2.29.11Review92026-06-10
2.29.10Review92026-06-09
2.29.9Review92026-06-04
2.29.8Review72026-06-03
2.29.5Review72026-05-31
2.29.4Review72026-05-31
2.29.3Review72026-05-31

Block this in CI

PkgRadar gates @autofleet/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @autofleet/[email protected]
@autofleet/cli — npm security scan | PkgRadar