npm · registry.npmjs.org

@evercam/api

Install-time lifecycle script, New Lifecycle Script Vs Previous

Why PkgRadar flagged 1.0.0-f856de36a

Severity	Signal	Evidence
high	New Lifecycle Script Vs Previous	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.0.0-f856de36a`	High risk	45	2026-07-27
`1.0.0-505b1a20b`	High risk	45	2026-07-27
`1.0.0-1bc49e878`	High risk	45	2026-07-25
`1.0.0-4e1875453`	High risk	45	2026-07-25
`1.0.0-abf5647b9`	High risk	45	2026-07-23
`1.0.0-24c3710bf`	High risk	45	2026-07-20
`1.0.0-07cc45493`	High risk	45	2026-07-16
`1.0.0-e02ff9d48`	High risk	45	2026-07-13
`1.0.0-5075fd146`	High risk	45	2026-07-09
`1.0.0-882ca0356`	High risk	45	2026-07-08
`1.0.0-api-fixes-e26460f3c`	Low risk	0	2026-07-08
`1.0.0-api-fixes-7de7fc3dd`	Review	2	2026-07-08
`1.0.0-e2b234f84`	High risk	45	2026-07-08
`1.0.0-api-fixes-bdf31a1d5`	Review

Campaign attribution

Block this in CI

PkgRadar gates @evercam/api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @evercam/[email protected]