npm · registry.npmjs.org
martin-loop
Install Lifecycle Remote Or Exec: postinstall="node -e \"if(process.env.CI==='true'||process.env.MARTIN_SUPPRESS_POSTINSTALL==='1'){process.exit(0)};const lines=['','MartinLoop installed. First-run guided flow:',' npx -y martin-loop@latest start',' npx -y martin-loop@latest demo',' npx -y martin-loop@latest run \\\"your objective\\\" --verify \\\"npm test\\\"','','Governed runs are default. MartinLoop auto-checks doctor, session-start, and preflight, then executes when the environment is ready.'];console.log(lines.join('\\\\n'));\""
Why PkgRadar flagged 0.3.3
| Severity | Signal | Evidence |
|---|---|---|
| high | New Lifecycle Script Vs Previous | postinstall added in 0.3.3 vs 0.3.2: "node -e \"if(process.env.CI==='true'||process.env.MARTIN_SUPPRESS_POSTINSTALL==='1'){process.exit(0)};const lines=['','MartinLoop installed. First-run guided flow:',' npx -y martin-loop@latest start',' npx -y martin-loop@latest demo',' npx -y martin-loop@latest run \\\"your objective\\\" --verify \\\"npm test\\\"','','Governed runs are default. MartinLoop auto-checks doctor, session-start, and preflight, then executes when the environment is ready.'];console.log(lines.join('\\\\n'));\"" · package.json |
| high | Install Lifecycle Remote Or Exec | postinstall="node -e \"if(process.env.CI==='true'||process.env.MARTIN_SUPPRESS_POSTINSTALL==='1'){process.exit(0)};const lines=['','MartinLoop installed. First-run guided flow:',' npx -y martin-loop@latest start',' npx -y martin-loop@latest demo',' npx -y martin-loop@latest run \\\"your objective\\\" --verify \\\"npm test\\\"','','Governed runs are default. MartinLoop auto-checks doctor, session-start, and preflight, then executes when the environment is ready.'];console.log(lines.join('\\\\n'));\"" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.3.6 | Review | 10 | 2026-06-10 |
0.3.5 | Review | 10 | 2026-06-10 |
0.3.4 | Review | 10 | 2026-06-10 |
0.3.3 | High risk | 75 | 2026-06-10 |
0.3.2 | Low risk | 0 | 2026-06-08 |
0.3.1 | Low risk | 0 | 2026-06-08 |
0.3.0 | Low risk | 0 | 2026-06-07 |
0.2.11 | Low risk | 0 | 2026-06-07 |
0.2.10 | Low risk | 0 | 2026-06-07 |
0.2.9 | Low risk | 0 | 2026-06-05 |
0.2.8 | Low risk | 0 | 2026-06-05 |
0.2.7 | Low risk | 0 | 2026-05-27 |
0.2.6 | Low risk | 0 | 2026-05-27 |
0.2.5 | Low risk | 0 | 2026-05-26 |
0.2.4 | Review | 1 | 2026-05-25 |
0.2.3 | Review | 1 | 2026-05-25 |
0.2.1 | Review | 42 | 2026-05-24 |
0.2.2 | Review | 42 | 2026-05-24 |
Campaign attribution
Block this in CI
pkgradar gate --ecosystem npm [email protected]