frontend-collective / frontend-collective/react-sortable-tree
[potential Security Alert] New `storybook` script added in `react-sortable-tree-psh@1.5.2`
- Dominant language
- JavaScript
- Stars
- 5k
- Forks
- 914
- PR merge metrics
- No merged PRs in 30d
Description
A new `storybook` script was detected in version `1.5.2` of the package `react-sortable-tree-psh`.
**Suspicion Score:** 13/100
**Script content:**
```
cross-env TARGET=development start-storybook -p ${PORT:-3001} -h 0.0.0.0
```
see [npm documentation on package scripts](https://docs.npmjs.com/cli/v9/using-npm/scripts) for more details.
and [the detector](https://github.com/alphaleadership/npm-check). to understand why this script might be dangerous.
to get the alert only for dangerous scripts, please visit[the telegram](https://t.me/npmalert) if you want to improve the algorythm open a pull request
This could be a security risk. Please investigate.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.