PkgRadar

npm · registry.npmjs.org

@phluzz/workflow

New Account With Lifecycle Hook: package first published 0 day(s) ago, 4 total version(s), has lifecycle hook

Why PkgRadar flagged 0.1.1-alpha.2

SeveritySignalEvidence
highNew Account With Lifecycle Hookpackage first published 0 day(s) ago, 4 total version(s), has lifecycle hook · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.1-alpha.13Review52026-06-11
0.1.1-alpha.12Review52026-06-11
0.1.1-alpha.11Review52026-06-11
0.1.1-alpha.10Review52026-06-11
0.1.1-alpha.9Review52026-06-11
0.1.1-alpha.8Review52026-06-10
0.1.1-alpha.7Review52026-06-10
0.1.1-alpha.6Review52026-06-10
0.1.1-alpha.5Review52026-06-10
0.1.1-alpha.3Review52026-06-10
0.1.1-alpha.4Review52026-06-10
0.1.1-alpha.2High risk52026-06-10
0.1.1-alpha.1High risk52026-06-10
0.1.0High risk52026-06-10
0.1.1-alpha.0High risk52026-06-10

Related campaigns

Block this in CI

PkgRadar gates @phluzz/workflow (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @phluzz/[email protected]