npm · registry.npmjs.org
@vibe-agent-toolkit/vat-development-agents
Install Lifecycle Suppresses Failure: postinstall="vat claude plugin install --npm-postinstall || exit 0"
Why PkgRadar flagged 0.1.38
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Suppresses Failure | postinstall="vat claude plugin install --npm-postinstall || exit 0" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.1.38 | High risk | 30 | 2026-06-05 |
0.1.39-rc.1 | High risk | 30 | 2026-06-05 |
Block this in CI
pkgradar gate --ecosystem npm @vibe-agent-toolkit/[email protected]