PkgRadar

npm · registry.npmjs.org

port-authority-agent-terminal-mcp

Install Lifecycle Remote Or Exec: postinstall="node -e \"try{require('./scripts/postinstall.cjs')}catch(e){if(e&&e.code==='MODULE_NOT_FOUND'&&String(e.message).includes('scripts/postinstall.cjs')){console.warn('[paat postinstall] skipped missing helper: '+e.message);process.exit(0)}throw e}\""

Why PkgRadar flagged 0.2.3

SeveritySignalEvidence
highInstall Lifecycle Remote Or Execpostinstall="node -e \"try{require('./scripts/postinstall.cjs')}catch(e){if(e&&e.code==='MODULE_NOT_FOUND'&&String(e.message).includes('scripts/postinstall.cjs')){console.warn('[paat postinstall] skipped missing helper: '+e.message);process.exit(0)}throw e}\"" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.3High risk352026-06-06
0.3.0High risk352026-06-06

Block this in CI

PkgRadar gates port-authority-agent-terminal-mcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]