Worried about accidentally running `yarn` or `npm` with script hooks enabled such as `preinstall` or `postinstall`?

Local-only test package exercising the npm preinstall lifecycle hook.

Preinstall

Dependency to an HTTP(S) tarball package. The dependency preinstall script should write a package-specific preinstall flag.

- node =>8.0 - npm >=5.6 - vue >=2.5 - webpack >=4.0 #### PreInstall：

Force a specific package manager to be used on a project

Scan node_modules for preinstall/install/postinstall scripts (the #1 npm supply-chain attack vector) and gate CI on any that aren't explicitly approved.

a playful JavaScript package manager — no preinstall scripts, no auto code execution

⚠️ 安全研究演示：npm preinstall 钩子静默环境探测 — 仅供安全教学，请勿用于恶意目的

Enable or disable npm preinstall and postinstall hook

Scan npm packages for malicious preinstall/postinstall scripts before they execute

Run a preinstall script

Output node for node-red for TTS (text to speech). Requires preinstall TTS program on command line.

Has preinstall in tarball

Security scanner for npm package lifecycle scripts — detect malicious postinstall, preinstall, and prepare scripts before they run

This packages modifies package-lock.json to force the installation of specific version of a transitive dependency (dependency of dependency), similar to yarn's [selective dependency resolutions](https://yarnpkg.com/lang/en/docs/selective-version-resolutio

No description provided.

Specification package manager

A tool for running only the dependency lifecycle hooks specified in an allowlist.

This package modifies package-lock.json to force the installation of specified versions of transitive dependencies