PkgRadar

npm · registry.npmjs.org

sku

Install-time lifecycle script: postinstall="node ./scripts/postinstall.js"

Scanned versions

VersionVerdictScoreScanned (UTC)
5.7.0Low risk02026-06-16
5.7.2Low risk02026-06-16
5.7.1Low risk02026-06-16
16.0.0-vitest-min-4.1-20260616015621Review12026-06-16
15.15.4-refactor-prerender-worker-20260609055146Review12026-06-09
15.15.3Review12026-06-04
15.15.3-fix-loadable-collector-css-ordering-20260602043823Review12026-06-02
15.15.3-wip-esm-jiti-20260521063823Review142026-05-28
16.0.0-webpack-lightningcss-20260528052139Review142026-05-28

Block this in CI

PkgRadar gates sku (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]