npm · registry.npmjs.org
9remote
Install Lifecycle Suppresses Failure: postinstall="node dist/install.cjs || true"
Why PkgRadar flagged 2.0.21
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Suppresses Failure | postinstall="node dist/install.cjs || true" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.0.21 | High risk | 25 | 2026-06-17 |
2.0.14 | High risk | 25 | 2026-06-17 |
0.1.0 | High risk | 47 | 2026-06-17 |
0.1.1 | High risk | 47 | 2026-06-17 |
2.0.15 | High risk | 25 | 2026-06-17 |
2.0.16 | High risk | 25 | 2026-06-17 |
0.1.4 | High risk | 72 | 2026-06-17 |
2.0.17 | High risk | 25 | 2026-06-17 |
2.0.20 | High risk | 25 | 2026-06-17 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]