PkgRadar

npm · registry.npmjs.org

akm-cli

Install Lifecycle Remote Or Exec: preinstall="node -e \"var ua=process.env.npm_config_user_agent||'';if(process.versions.bun||ua.startsWith('bun/')||process.env.BUN_INSTALL){process.exit(0)}console.error('\\n ERROR: akm-cli 0.8 requires the Bun runtime (https://bun.sh) or the prebuilt binary.\\n Running under Node.js is not supported in this release.\\n Install options:\\n 1. Bun: curl -fsSL https://bun.sh/install | bash && bun install -g akm-cli\\n 2. Binary: curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\\n Cross-runtime support is planned for 0.9.0.\\n');process.exit(1)\""

Why PkgRadar flagged 0.8.0

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspreinstall added in 0.8.0 vs 0.8.0-rc2: "node -e \"var ua=process.env.npm_config_user_agent||'';if(process.versions.bun||ua.startsWith('bun/')||process.env.BUN_INSTALL){process.exit(0)}console.error('\\n ERROR: akm-cli 0.8 requires the Bun runtime (https://bun.sh) or the prebuilt binary.\\n Running under Node.js is not supported in this release.\\n Install options:\\n 1. Bun: curl -fsSL https://bun.sh/install | bash && bun install -g akm-cli\\n 2. Binary: curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\\n Cross-runtime support is planned for 0.9.0.\\n');process.exit(1)\"" · package.json
highInstall Lifecycle Remote Or Execpreinstall="node -e \"var ua=process.env.npm_config_user_agent||'';if(process.versions.bun||ua.startsWith('bun/')||process.env.BUN_INSTALL){process.exit(0)}console.error('\\n ERROR: akm-cli 0.8 requires the Bun runtime (https://bun.sh) or the prebuilt binary.\\n Running under Node.js is not supported in this release.\\n Install options:\\n 1. Bun: curl -fsSL https://bun.sh/install | bash && bun install -g akm-cli\\n 2. Binary: curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\\n Cross-runtime support is planned for 0.9.0.\\n');process.exit(1)\"" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.8.0High risk752026-06-04
0.8.0-rc.6High risk752026-06-03
0.8.0-rc.12Review102026-06-03
0.8.0-rc.11Review102026-06-02
0.8.0-rc.10Review102026-06-02
0.8.0-rc.9Review102026-06-01
0.8.0-rc.8Review122026-05-29
0.8.0-rc.7Review122026-05-28
0.8.0-rc.3Review422026-05-25

Block this in CI

PkgRadar gates akm-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]