PkgRadar

npm · registry.npmjs.org

@navinora/connector-darwin-arm64

Install-time lifecycle script: postinstall="node postinstall.js"

Why PkgRadar flagged 0.8.71

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspostinstall added in 0.8.71 vs 0.8.70: "node postinstall.js" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.8.71High risk452026-06-10
0.8.70Review72026-06-10
0.8.42High risk452026-06-10
0.8.69Review32026-06-10
0.8.67Review32026-06-09
0.8.65Review32026-06-09
0.8.64Review32026-06-09
0.8.63Review52026-06-05
0.8.62Review32026-06-04
0.8.61Review52026-06-03
0.8.59Review32026-06-02
0.8.58Review32026-06-01
0.8.57Review52026-06-01
0.8.56Review52026-06-01
0.8.55Review52026-06-01
0.8.54Review32026-06-01
0.8.53Review52026-06-01
0.8.52Review32026-05-31
0.8.50Review52026-05-30
0.8.49Review52026-05-30
0.8.48Review32026-05-30
0.8.47Review32026-05-30
0.8.46Review32026-05-30
0.8.51Review32026-05-30
0.8.45Review52026-05-30
0.8.43Review52026-05-30
0.8.44Review32026-05-30
0.8.41Low risk02026-05-24

Block this in CI

PkgRadar gates @navinora/connector-darwin-arm64 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @navinora/[email protected]