npm · registry.npmjs.org
@smithers-orchestrator/jj-darwin-arm64
Install Lifecycle Remote Or Exec: postinstall="node -e \"const fs=require('fs');const p=__dirname+'/bin/jj';if(fs.existsSync(p))fs.chmodSync(p,0o755)\""
Why PkgRadar flagged 0.24.0
| Severity | Signal | Evidence |
|---|---|---|
| high | New Lifecycle Script Vs Previous | postinstall added in 0.24.0 vs 0.23.0: "node -e \"const fs=require('fs');const p=__dirname+'/bin/jj';if(fs.existsSync(p))fs.chmodSync(p,0o755)\"" · package.json |
| high | Install Lifecycle Remote Or Exec | postinstall="node -e \"const fs=require('fs');const p=__dirname+'/bin/jj';if(fs.existsSync(p))fs.chmodSync(p,0o755)\"" · package.json |
| high | New Account With Lifecycle Hook | package first published 8 day(s) ago, 2 total version(s), has lifecycle hook · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.23.0 | Low risk | 0 | 2026-06-16 |
0.24.0 | High risk | 75 | 2026-06-16 |
Campaign attribution
Related campaigns
- new_account_with_lifecycle_hook:package first published 8 day(s) ago, 2 total version(s), has lifecycle hook — 12 releases, max score 107
- fucory — 2 releases, max score 75
Block this in CI
pkgradar gate --ecosystem npm @smithers-orchestrator/[email protected]