PkgRadar

npm · registry.npmjs.org

flowforge-capture

Install Lifecycle Suppresses Failure: postinstall="node ./dist/scripts/postinstall.js || true"

Why PkgRadar flagged 0.5.8

SeveritySignalEvidence
highInstall Lifecycle Suppresses Failurepostinstall="node ./dist/scripts/postinstall.js || true" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.5.8High risk252026-06-10
0.5.6High risk252026-06-10
0.5.7High risk252026-06-10
0.8.2Review72026-06-06
0.8.1Review72026-06-06
0.8.0Review72026-06-06
0.7.2Review72026-06-06
0.7.1Review72026-05-30
0.5.10Review162026-05-28
0.6.0Review162026-05-28

Block this in CI

PkgRadar gates flowforge-capture (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence