flags/src/flags/hasScript.html at main · NodeSecure/flags · GitHub

This repository was archived by the owner on Oct 4, 2025. It is now read-only.

26 lines (26 loc) · 876 Bytes

<div>

<h1>📦 hasScript</h1>

<p>

The package has pre and/or post script in the

<b>package.json</b> file. These script will be executed before or

after the installation of a dependency (this is useful for example to build

native addons or similar things). However these script may be used to

execute malicious code on your system.

</p>

<ul>

<li>

href="https://blog.npmjs.org/post/141702881055/package-install-scripts-vulnerability"

rel="nofollow"

>Package install scripts vulnerability</a

</li>

<li>

href="https://snyk.io/blog/ten-npm-security-best-practices/"

rel="nofollow"

>10 npm Security Best Practices</a

</li>

</ul>

</div>

Expand file tree