Execute npm/yarn lifecycle scripts with pre/post script support - 執行 npm/yarn 生命週期腳本，支援前置/後置腳本

Scan npm packages for malicious lifecycle scripts before installing them

Sandboxing npm lifecycle scripts

A private package for various tasks for Expo module packages like compiling and testing

A tool for running only the dependency lifecycle hooks specified in an allowlist.

Wrapper around npm install that warns about lifecycle scripts before running them.

Security scanner for npm package lifecycle scripts — detect malicious postinstall, preinstall, and prepare scripts before they run

JavaScript package lifecycle hook runner

empty package for testing/dumping npm lifecycle scripts

Supply-chain blast-radius visualizer that traces npm install-time lifecycle scripts, file/network access, and secret-canary reads.

targate is install-time supply-chain security for npm — open source, AI-optional, and run from your terminal. It vets every dependency (tarball, lifecycle scripts, lockfile, reputation, known-malicious records) before its code can run, and only installs i

Detect if we were run as a result of `npm publish`

Run a lifecycle script for a package (descendant of npm-lifecycle)

Worried about accidentally running `yarn` or `npm` with script hooks enabled such as `preinstall` or `postinstall`?

A CLI tool to detect supply chain attacks in npm packages by analyzing lifecycle scripts and registry metadata.

Educational tool for demonstrating npm package lifecycle scripts

ESLint plugin for Angular applications, following https://angular.dev/style-guide

Testing which lifecycle scripts are relevant for the `install` and `pack` commands of various JavaScript package managers.

A set of general utilities for the lifecycle of a JS/TS project/library

pnpm config plugin — deploy ks skills on install (no lifecycle scripts)