Loading npm security reports…
Shared build configuration for TypeScript projects — ESLint, Prettier, tsconfig, and Playwright presets
Install-time code mutates the consuming project by seeding build configs, GitHub workflows, release scripts, and assets. No confirmed exfiltration or hidden payload behavior was found.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
src/pipeline/auto-changeset.shView on unpkgPackage ships high-entropy non-source blobs.
assets/jews-support-a-free-palestine-poster.pdfView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L28Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L28Package ships non-JavaScript build or shell helper files.
src/pipeline/auto-changeset.shView on unpkgPackage ships high-entropy non-source blobs.
assets/jews-support-a-free-palestine-poster.pdfView on unpkg