@doikayt/typescript-build-config@0.1.18

One or more suspicious static signals were detected.

npm installation runs postinstall; the Playwright command and init scaffolder require explicit user invocation.

Creates absent config, pipeline, and branding files in the installing project; existing target files are skipped.

documented build-config and release-workflow scaffolding

The postinstall hook is intrusive but transparently implements this configuration package's documented purpose, copying only fixed local templates and preserving existing files. No concrete malicious chain was found by source inspection.