npm · registry.npmjs.org
chdb
Install Lifecycle Remote Or Exec: install="node -e \"\""
Why PkgRadar flagged 3.1.0-rc.2
| Severity | Signal | Evidence |
|---|---|---|
| high | New Lifecycle Script Vs Previous | install added in 3.1.0-rc.2 vs 3.1.0-rc.1: "node -e \"\"" · package.json |
| high | Install Lifecycle Remote Or Exec | install="node -e \"\"" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.1.0-rc.2 | High risk | 75 | 2026-06-15 |
3.0.1 | High risk | 75 | 2026-06-15 |
3.1.0-rc.1 | Low risk | 0 | 2026-06-15 |
1.6.0 | Review | 3 | 2026-06-15 |
3.0.0 | Low risk | 0 | 2026-06-15 |
2.0.0 | Review | 11 | 2026-06-15 |
2.0.1 | Review | 11 | 2026-06-15 |
Campaign attribution
Block this in CI
pkgradar gate --ecosystem npm [email protected]