Loading npm security reports…
A benign placeholder for npm.
Automatic npm lifecycle hooks fingerprint the installation environment and transmit it over HTTP. The package has no functional runtime implementation that explains these callbacks.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPreinstall and postinstall send the installing user's name, host name, working directory, and timestamp to an unrelated HTTP host.
package.jsonView on unpkg · L10The callbacks run automatically during npm installation and ignore failures, providing no user-facing purpose.
package.jsonView on unpkg · L9Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgAn npm script sends host identity through command substitution to a fixed external destination.
package.json#scripts.preinstallView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgPreinstall and postinstall send the installing user's name, host name, working directory, and timestamp to an unrelated HTTP host.
package.jsonView on unpkg · L10The callbacks run automatically during npm installation and ignore failures, providing no user-facing purpose.
package.jsonView on unpkg · L9Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgAn npm script sends host identity through command substitution to a fixed external destination.
package.json#scripts.preinstallView on unpkg