Check out http://socket.dev/npm/issue/installScripts

Majority are benign, but when a package without one adds one, you probably want to see why :)