PkgRadar

npm · registry.npmjs.org

@m2s2/cli

New Account With Lifecycle Hook: package first published 15 day(s) ago, 5 total version(s), has lifecycle hook

Why PkgRadar flagged 0.1.22

SeveritySignalEvidence
highNew Account With Lifecycle Hookpackage first published 15 day(s) ago, 5 total version(s), has lifecycle hook · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.27Review32026-06-15
0.1.26Review52026-06-13
0.1.25Review52026-06-13
0.1.24Review52026-06-12
0.1.23Review52026-06-12
0.1.22High risk52026-06-11
0.1.20High risk52026-06-10
0.1.19High risk52026-06-10
0.1.0Review52026-05-30
0.1.14Review52026-05-30

Block this in CI

PkgRadar gates @m2s2/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @m2s2/[email protected]