npm · registry.npmjs.org
index-ulid
Install Lifecycle Remote Or Exec: postinstall="node -e \"const fs=require('node:fs');const required=['dist/node/index.cjs','dist/node/index.js','dist/node/utils.js','dist/browser/index.cjs','dist/browser/index.js','dist/index.d.ts','dist/cli.js'];const missing=required.filter((f)=>!fs.existsSync(f));if(missing.length){throw new Error('Missing required publish artifacts: '+missing.join(', '));}\" && node dist/node/utils.js"
Why PkgRadar flagged 3.0.2
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | postinstall="node -e \"const fs=require('node:fs');const required=['dist/node/index.cjs','dist/node/index.js','dist/node/utils.js','dist/browser/index.cjs','dist/browser/index.js','dist/index.d.ts','dist/cli.js'];const missing=required.filter((f)=>!fs.existsSync(f));if(missing.length){throw new Error('Missing required publish artifacts: '+missing.join(', '));}\" && node dist/node/utils.js" · package.json |
| high | New Account With Lifecycle Hook | package first published 0 day(s) ago, 1 total version(s), has lifecycle hook · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.0.2 | High risk | 40 | 2026-06-11 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]