npm · registry.npmjs.org
@safedep/pmg
Install Lifecycle Remote Or Exec: postinstall="node install.js"
Why PkgRadar flagged 0.17.1
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | postinstall="node install.js" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.18.2 | Low risk | 0 | 2026-06-10 |
0.18.1 | Low risk | 0 | 2026-06-07 |
0.18.0 | Low risk | 0 | 2026-06-05 |
0.17.4 | Low risk | 0 | 2026-05-30 |
0.17.2 | Low risk | 0 | 2026-05-28 |
0.17.3 | Low risk | 0 | 2026-05-28 |
0.17.1 | Review | 12 | 2026-05-27 |
0.16.0 | Review | 12 | 2026-05-26 |
0.17.0 | Review | 12 | 2026-05-26 |
Block this in CI
pkgradar gate --ecosystem npm @safedep/[email protected]