Worried about accidentally running `yarn` or `npm` with script hooks enabled such as `preinstall` or `postinstall`?

Local-only test package exercising the npm preinstall lifecycle hook.

Preinstall

Enable or disable npm preinstall and postinstall hook

Run a preinstall script

Dependency to an HTTP(S) tarball package. The dependency preinstall script should write a package-specific preinstall flag.

Force a specific package manager to be used on a project

Educational demo of npm preinstall/postinstall lifecycle scripts - each hook fetches a package's registry metadata and logs the response, and reports how npm >=12's allowScripts blocking affects it.

- node =>8.0 - npm >=5.6 - vue >=2.5 - webpack >=4.0 #### PreInstall：

Output node for node-red for TTS (text to speech). Requires preinstall TTS program on command line.

⚠️ 安全研究演示：npm preinstall 钩子静默环境探测 — 仅供安全教学，请勿用于恶意目的

Scan npm packages for malicious preinstall/postinstall scripts before they execute

a playful JavaScript package manager — no preinstall scripts, no auto code execution

Has preinstall in tarball

Test to see order of operations for preinstall scripts

Pacote de exemplo — contém scripts de preinstall e postinstall que apenas fazem logs.

An example npm package with a preinstall script

This packages modifies package-lock.json to force the installation of specific version of a transitive dependency (dependency of dependency), similar to yarn's [selective dependency resolutions](https://yarnpkg.com/lang/en/docs/selective-version-resolutio

No description provided.

Specification package manager