PkgRadar

npm · registry.npmjs.org

@decocms/parity

Install-time lifecycle script: postinstall="node scripts/postinstall.cjs"

Why PkgRadar flagged 0.11.8

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspostinstall added in 0.11.8 vs 0.11.6: "node scripts/postinstall.cjs" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.11.16Review12026-06-17
0.11.14Review12026-06-17
0.11.13Review12026-06-17
0.11.11Review12026-06-17
0.11.10Review12026-06-17
0.11.9Review12026-06-17
0.11.8High risk452026-06-17
0.11.6Low risk02026-06-17
0.11.5Low risk02026-06-17
0.11.4Low risk02026-06-17
0.11.3Low risk02026-06-17
0.11.2Low risk02026-06-17
0.11.1Low risk02026-06-17
0.10.1Low risk02026-06-17
0.11.0Low risk02026-06-17
0.10.0Low risk02026-05-29
0.9.0Low risk02026-05-29
0.8.0Low risk02026-05-29
0.8.1Low risk02026-05-29
0.6.0Low risk02026-05-28
0.5.4Low risk02026-05-28
0.3.0Low risk02026-05-27
0.4.0Low risk02026-05-27

Campaign attribution

Part of the asteroiddao npm campaign campaign.

Block this in CI

PkgRadar gates @decocms/parity (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @decocms/[email protected]
Start free — 25 scans / moView full evidence