PkgRadar

npm · registry.npmjs.org

fs-ext-extra-prebuilt

Install Lifecycle Remote Or Exec: install="node ./install.js"

Why PkgRadar flagged 2.2.8

SeveritySignalEvidence
highInstall Lifecycle Remote Or Execinstall="node ./install.js" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
2.2.8Review102026-05-27
2.2.9Review102026-05-27

Block this in CI

PkgRadar gates fs-ext-extra-prebuilt (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]