Package evidence

[email protected]

New Account With Lifecycle Hook: package first published 36 day(s) ago, 6 total version(s), has lifecycle hook

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 5
Versions published: 6
First published: May 2026
Publisher: faiyyaz

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'

Publisherfaiyyaz

Artifact bytes86,709

Previous version0.0.2

Published2026-05-03T09:36:45.184Z

SHA-2569ff141c5d5da2c261aaff1624e4b659bd4fc316e0c43697155429ce724b76767

Why flagged

What the scanner saw

New Account With Lifecycle Hook: package first published 36 day(s) ago, 6 total version(s), has lifecycle hook

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

16h agoLast checked

reviewRisk

5Score

0.0.3Version

Status history (1 event)

new → available16h ago · risk review · score 5 · status changed

Evidence

Static findings

2 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
medium	New Account With Lifecycle Hook	package.json	package first published 36 day(s) ago, 6 total version(s), has lifecycle hook	10

Show all 2 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
medium	New Account With Lifecycle Hook	package.json	package first published 36 day(s) ago, 6 total version(s), has lifecycle hook	10
low	Install-time lifecycle script	package.json	postinstall="patch-package"	5

Manifest

Package metadata

Scripts7

androidreact-native run-android
iosreact-native run-ios
linteslint .
postinstallpatch-package
setup:clinode ./bin/structure-setup.js
startreact-native start
testjest

Dependencies43

@bam.tech/react-native-image-resizer^3.0.11
@react-native-async-storage/async-storage^2.2.0
@react-native-community/netinfo^12.0.1
@react-native-firebase/analytics^24.0.0
@react-native-firebase/app^24.0.0
@react-native-firebase/auth^24.0.0
@react-native-firebase/crashlytics^24.0.0
@react-native-firebase/firestore^24.0.0
@react-native-firebase/storage^24.0.0
@react-navigation/bottom-tabs^7.15.10
@react-navigation/drawer^7.9.9
@react-navigation/material-top-tabs^7.4.24
@react-navigation/native^7.2.2
@react-navigation/stack^7.8.11
@shopify/flash-list^2.3.1
axios^1.15.2
expo~55.0.0
expo-calendar^55.0.14
expo-image^55.0.9
expo-updates^55.0.21
lodash^4.18.1
luxon^3.7.2
nanoid^5.1.9
react19.2.0
react-native0.83.6
react-native-actions-sheet^10.1.2
react-native-bootsplash^7.3.1
react-native-gesture-handler^2.31.1
react-native-haptic-feedback^3.0.0
react-native-image-picker^8.2.1
…and 13 more.