PkgRadar

npm · registry.npmjs.org

@adobe/spectrum-css-workflow-icons

Credential File Packaged, Install-time lifecycle script, Obfuscation Density +1 more

Why PkgRadar flagged 1.6.0

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspackage.json
mediumCredential File Packagedpackage/.env

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
1.6.0High risk602026-06-24
1.7.0Low risk02026-06-24
4.1.0Low risk02026-06-24
5.0.0Low risk02026-06-24

Campaign attribution

Part of the asteroiddao npm campaign campaign.

Block this in CI

PkgRadar gates @adobe/spectrum-css-workflow-icons (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @adobe/[email protected]
Start free — 25 scans / moView full evidence