A list of OSS packages that are known to require lifecycle scripts to function properly

A list of OSS packages that are known to require lifecycle scripts to function properly

Rebuild packages that are already installed by running their lifecycle scripts

Execute npm/yarn lifecycle scripts with pre/post script support - 執行 npm/yarn 生命週期腳本，支援前置/後置腳本

Install Tau globally with its reviewed npm lifecycle scripts allowed for this install only.

Run npm installs with dependency lifecycle scripts disabled, then rebuild explicitly trusted dependencies.

Sort package.json scripts field following npm lifecycle scripts order with script grouping (pre/post) support / 排序 package.json scripts 欄位，遵循 npm 生命週期腳本順序，支援腳本分組 (pre/post)

Node.js supply-chain enforcement at install and at runtime. Policy-gated lifecycle scripts, caller-chain-attributed runtime hook.

AWS CodeDeploy lifecycle scripts using ES6 to deploy a node app to EC2

Testing which lifecycle scripts are relevant for the `install` and `pack` commands of various JavaScript package managers.

Educational demo of npm preinstall/postinstall lifecycle scripts - each hook fetches a package's registry metadata and logs the response, and reports how npm >=12's allowScripts blocking affects it.

Backend-isolated install auditor for npm/pnpm/yarn lifecycle scripts.

Install script firewall for npm - default-deny lifecycle scripts with explicit, reviewable allowlists

Checks if your CI is vulnerable to an attack from lifecycle scripts

Test-only container package that depends on @wojciech_lesicki/security-lifecycle-demo, used to verify its behavior end-to-end as a real dependency (install, lifecycle scripts, allowScripts blocking) rather than as the root project.

Checks if your CI is vulnerable to an attack from lifecycle scripts

A tool for running only the dependency lifecycle hooks specified in an allowlist.

Static obfuscation detector for npm lifecycle scripts — supply chain attack prevention

A private package for various tasks for Expo module packages like compiling and testing

Pre-install security gate for npm lifecycle scripts using TypeSafe System One.