PkgRadar

npm · registry.npmjs.org

token-pilot

Install-time lifecycle script: postinstall="node scripts/postinstall.mjs"

Scanned versions

VersionVerdictScoreScanned (UTC)
0.45.1Review32026-06-13
0.46.0Review32026-06-13
0.45.0Review52026-06-11
0.44.0Review52026-06-10
0.43.1Review52026-06-06
0.43.0Review52026-06-06
0.42.3Review52026-06-05
0.42.2Review52026-06-05
0.42.1Review52026-06-05
0.42.0Review52026-06-05
0.41.0Review52026-06-05
0.40.0Review52026-06-04
0.39.3Review52026-06-04
0.39.2Review52026-06-04
0.39.1Review52026-06-03
0.36.0Review52026-06-03
0.35.0Review52026-06-02
0.34.3Review52026-05-25
0.34.2Review52026-05-25

Block this in CI

PkgRadar gates token-pilot (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]