PkgRadar

npm · registry.npmjs.org

@openmrs/esm-home

Install-time lifecycle script: postinstall="husky install"

Why PkgRadar flagged 5.2.0

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspostinstall added in 5.2.0 vs 2.1.0: "husky install" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
5.2.0High risk452026-06-20
1.0.0Low risk02026-06-18
2.0.0Low risk02026-06-18
2.1.0Low risk02026-06-18

Campaign attribution

Part of the asteroiddao npm campaign campaign.

Block this in CI

PkgRadar gates @openmrs/esm-home (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @openmrs/[email protected]