npm · registry.npmjs.org
@stackone/cli
Install Lifecycle Suppresses Failure: postinstall="echo '# Agent Instructions\n\nDefault instructions for StackOne Agent Runtime.\n' > node_modules/@stackone/agent-harness/INSTRUCTIONS.md 2>/dev/null || true"
Why PkgRadar flagged 1.36.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Suppresses Failure | postinstall="echo '# Agent Instructions\n\nDefault instructions for StackOne Agent Runtime.\n' > node_modules/@stackone/agent-harness/INSTRUCTIONS.md 2>/dev/null || true" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.38.0 | Low risk | 0 | 2026-06-09 |
1.38.1 | Low risk | 0 | 2026-06-09 |
1.37.1 | Low risk | 0 | 2026-06-09 |
1.37.0 | Low risk | 0 | 2026-06-08 |
1.36.1 | Low risk | 0 | 2026-06-08 |
1.36.0 | Review | 7 | 2026-06-04 |
1.35.0 | Review | 7 | 2026-05-28 |
1.35.1 | Review | 7 | 2026-05-28 |
Block this in CI
pkgradar gate --ecosystem npm @stackone/[email protected]