PkgRadar

npm · registry.npmjs.org

@zonko-ai/harbor

Install-time lifecycle script: postinstall="node --input-type=module -e \"import{existsSync}from'node:fs';import{pathToFileURL}from'node:url';const p='dist/postinstall.js';if(existsSync(p))await import(pathToFileURL(p).href).catch(()=>{})\""

Scanned versions

VersionVerdictScoreScanned (UTC)
2.31.0Review52026-06-04
2.30.0Review52026-06-03
2.29.2Review52026-05-30
2.29.0Review52026-05-30
2.29.1Review32026-05-30
2.28.1Review32026-05-30
2.27.2Review32026-05-30
2.28.0-alpha.1Review32026-05-30
2.28.0-alpha.0Review32026-05-30
2.28.0Review32026-05-30

Block this in CI

PkgRadar gates @zonko-ai/harbor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @zonko-ai/[email protected]
Start free — 25 scans / moView full evidence