npm · registry.npmjs.org

pgflow

Install Lifecycle Suppresses Failure: postinstall="chmod +x dist/index.js || true"

Why PkgRadar flagged 0.0.0-slot-aware-backpressure-dc209fb8-20260603161325

Severity	Signal	Evidence
high	Install Lifecycle Suppresses Failure	postinstall="chmod +x dist/index.js \|\| true" · package.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.0.0-slot-aware-backpressure-dc209fb8-20260603161325`	High risk	12	2026-06-03
`0.14.2`	Review	7	2026-06-03
`0.0.0-slot-aware-backpressure-dc209fb8-20260530083919`	High risk	12	2026-06-03
`0.0.0-slot-aware-backpressure-183620f7-20260527060424`	High risk	12	2026-06-03
`0.14.1`	Review	7	2026-05-27

Block this in CI

PkgRadar gates pgflow (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]