npm · registry.npmjs.org
svharness
Install-time lifecycle script: postinstall="node scripts/postinstall.js"
Why PkgRadar flagged 0.14.11
| Severity | Signal | Evidence |
|---|---|---|
| high | New Lifecycle Script Vs Previous | postinstall added in 0.14.11 vs 0.14.9: "node scripts/postinstall.js" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.14.18 | Review | 5 | 2026-06-12 |
0.14.17 | Review | 5 | 2026-06-11 |
0.14.12 | Review | 5 | 2026-06-11 |
0.14.11 | High risk | 45 | 2026-06-10 |
0.14.13 | Review | 5 | 2026-06-03 |
0.14.16 | Review | 5 | 2026-06-03 |
0.14.9 | Low risk | 0 | 2026-05-29 |
0.14.8 | Low risk | 0 | 2026-05-28 |
0.14.7 | Low risk | 0 | 2026-05-27 |
0.14.5 | Review | 5 | 2026-05-25 |
0.14.2 | Review | 5 | 2026-05-25 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]