PkgRadar

npm · registry.npmjs.org

wao

Install Lifecycle Suppresses Failure: postinstall="node postinstall.cjs || true"

Why PkgRadar flagged 0.41.3

SeveritySignalEvidence
highInstall Lifecycle Suppresses Failurepostinstall="node postinstall.cjs || true" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.41.3High risk122026-06-10
0.41.0High risk652026-06-10
0.41.1High risk122026-06-10
0.41.5Review152026-05-27

Campaign attribution

Part of the asteroiddao npm campaign campaign.

Block this in CI

PkgRadar gates wao (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence