@1interface
LPM Firewall blocks 4 packages in the @1interface npm scope. 4 have LPM's own review and are listed first.
The postinstall hook performs an unconsented destructive mutation of the consumer project by deleting React dependencies. This concrete install-time behavior warrants blocking publication.
The manifest establishes an automatic install-time deletion of common application dependencies. This is concrete destructive behavior, so publishing should be blocked.
The package's postinstall hook unconditionally deletes two common consumer dependencies. This is concrete destructive install-time behavior, so the package should be blocked.
The manifest directly defines an automatic postinstall command that deletes two consumer dependencies. This is concrete destructive install behavior, so the package should be blocked.