lifecycle-scripts

Here are 4 public repositories matching this topic...

Booyaka101 / npm-script-lens

See what an install script actually does before you approve it: behavioral analysis, binding.gyp inspection and resolved provenance identity for npm 12 allowScripts, pnpm allowBuilds, yarn and bun

nodejs cli npm security static-analysis audit provenance pnpm attestation slsa supply-chain-security sigstore install-scripts lifecycle-scripts allowscripts approve-scripts

Updated Aug 22, 2026
JavaScript

mikebfox / hookseal

Star

Audit npm package-lock install hooks with a small explicit allowlist.

npm security devtools supply-chain postinstall package-lock lifecycle-scripts

Updated May 23, 2026
JavaScript

shroomlife / install-script-auditor

Star

See what a lockfile's install scripts actually run, then generate an npm/pnpm/Yarn/Bun allowlist.

npm yarn developer-tools postinstall pnpm lockfile bun allowlist supply-chain-security sveltekit install-scripts lifecycle-scripts trusted-dependencies

Updated Aug 7, 2026
TypeScript

Booyaka101 / npm-install-census

Sponsor

Star

Daily census of what actually runs at npm install time. Powered by npm-script-lens against a download-ranked sample of the registry.

nodejs npm dataset security-research supply-chain-security install-scripts ecosystem-analysis lifecycle-scripts

Updated Aug 22, 2026
Python

Improve this page

Add a description, image, and links to the lifecycle-scripts topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the lifecycle-scripts topic, visit your repo's landing page and select "manage topics."

Learn more