Lines 20-60json
23 "build": "rm -rf dist && esbuild src/cli.ts --bundle --packages=external --platform=node --format=esm --outdir=dist --external:@inquirer/checkbox",
24 "dev": "tsx src/cli.ts",
25 "test": "node scripts/test-fast.mjs",
26 "test:full": "node scripts/run-tests.mjs tests/**/*.test.js",
27 "test:coverage": "c8 yarn test:full",
28 "coverage:check": "c8 --check-coverage yarn test:full",
29 "lint": "eslint src --cache --cache-location .eslintcache",
30 "format:check": "prettier --check --cache --cache-location .prettiercache .",
31 "format": "prettier --write --cache --cache-location .prettiercache .",
32 "typecheck": "tsc --noEmit",
33 "pack:local": "yarn pack",
34 "release": "GITHUB_TOKEN=$(gh auth token) release-it",
35 "release:dry": "GITHUB_TOKEN=$(gh auth token) release-it --dry-run",
36 "prepack": "yarn build",
37 "verify": "node scripts/verify.mjs",
38 "verify:full": "node scripts/verify.mjs --coverage",
39 "check:contract-behavior": "node --import tsx scripts/contract-behavior-check.mjs",
40 "postinstall": "node ./scripts/postinstall.mjs || true",
HighInstall Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L40 MediumAmbiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L40 41 "prepare": "lefthook install || true",
42 "security:audit": "yarn npm audit -A -R --severity high --environment production"
45 "@inquirer/checkbox": "5.2.1",
46 "commander": "13.1.0",
55 "@release-it/conventional-changelog": "11.0.1",
56 "@types/fs-extra": "11.0.4",
57 "@types/node": "22.20.1",
58 "@types/semver": "7.8.0",
59 "@typescript-eslint/eslint-plugin": "8.65.0",
60 "@typescript-eslint/parser": "8.65.0",