Loading npm security reports…
Shared build configuration for TypeScript projects — ESLint, Prettier, tsconfig, and Playwright presets
Installation mutates the consuming project by seeding configuration, GitHub Actions workflows, a release script, and assets. The release workflow can publish using the consumer repository's NPM secret when later triggered on main.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
src/pipeline/auto-changeset.shView on unpkgPackage ships high-entropy non-source blobs.
assets/jews-support-a-free-palestine-poster.pdfView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
src/playwright.jsView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/postinstall.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L28Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L28Package ships non-JavaScript build or shell helper files.
src/pipeline/auto-changeset.shView on unpkgPackage ships high-entropy non-source blobs.
assets/jews-support-a-free-palestine-poster.pdfView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
src/playwright.jsView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/postinstall.jsView on unpkg