PkgRadar

npm · registry.npmjs.org

mise

Install-time lifecycle script: preinstall="node installArchSpecificPackage.js"

Why PkgRadar flagged 2026.5.18

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspreinstall added in 2026.5.18 vs 3.0.0: "node installArchSpecificPackage.js" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.5Review12026-06-12
2026.6.4Review12026-06-12
2026.6.3Review12026-06-12
2026.5.18High risk452026-06-10
2026.6.1Review12026-06-07
2026.6.0Review12026-06-03
2.0.1Low risk02026-05-31
3.0.0Low risk02026-05-31

Block this in CI

PkgRadar gates mise (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]