npm · registry.npmjs.org

@contentauth/c2pa-node

Install-time lifecycle script: postinstall="node scripts/postinstall.cjs"

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.5.2`	Review	2	2026-06-17
`0.5.3`	Review	2	2026-06-17
`0.5.4`	Review	3	2026-06-02
`0.5.5`	Review	3	2026-06-02

Block this in CI

PkgRadar gates @contentauth/c2pa-node (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @contentauth/[email protected]