/**
 * Install hook deep analysis scanner (v4.2).
 *
 * Goes beyond basic SUSPICIOUS_SCRIPTS patterns to detect sophisticated
 * install-time attacks: secret harvesting, download-exec chains,
 * obfuscated one-liners, and embedded binary blobs.
 */
import type { Finding } from "./types.js";
interface InstallScripts {
    preinstall?: string;
    postinstall?: string;
    install?: string;
    preuninstall?: string;
    postuninstall?: string;
    prepare?: string;
}
/**
 * Deep-analyze install hook scripts from package.json.
 */
export declare function analyzeInstallHooks(scripts: InstallScripts, relativePath: string): Finding[];
/**
 * Extract install scripts from parsed package.json content.
 */
export declare function extractInstallScripts(content: string): InstallScripts | null;
export {};
//# sourceMappingURL=install-hook-scanner.d.ts.map