npm · registry.npmjs.org
@a-vision-software/vue-input-components
Remote Dependency Spec: dependencies.xlsx="https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
Why PkgRadar flagged 2.0.9
| Severity | Signal | Evidence |
|---|---|---|
| high | Remote Dependency Spec | dependencies.xlsx="https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.0.9 | High risk | 6 | 2026-06-15 |
2.0.5 | High risk | 6 | 2026-06-15 |
2.0.6 | High risk | 6 | 2026-06-15 |
2.0.7 | High risk | 6 | 2026-06-15 |
2.0.8 | High risk | 6 | 2026-06-15 |
Related campaigns
- remote_dependency_spec:dependencies.xlsx="https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz" — 398 releases, max score 52
Block this in CI
pkgradar gate --ecosystem npm @a-vision-software/[email protected]