npm · registry.npmjs.org
opencode-provider-manager
Install-time lifecycle script: postinstall="node install.js"
Why PkgRadar flagged 0.1.7-beta.7
| Severity | Signal | Evidence |
|---|---|---|
| high | Install-time lifecycle script | postinstall="node install.js" · package.json |
| high | Install Lifecycle Remote Or Exec | postinstall="node install.js" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.1.7-beta.7 | Review | 35 | 2026-05-25 |
0.1.7-beta.6 | Review | 47 | 2026-05-24 |
0.1.7-beta.5 | Review | 47 | 2026-05-24 |
0.1.7-beta.4 | Review | 47 | 2026-05-24 |
0.1.7-beta.3 | Review | 47 | 2026-05-24 |
0.1.7-beta.1 | Review | 47 | 2026-05-24 |
0.1.7-beta.2 | Review | 47 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]