PkgRadar

npm · registry.npmjs.org

@afosto/storefront

Install-time lifecycle script: preinstall="npx only-allow pnpm"

Scanned versions

VersionVerdictScoreScanned (UTC)
0.5.10Low risk02026-06-10
3.1.7Review22026-06-10
3.2.0-beta.21Review12026-05-29
3.2.0-beta.20Review12026-05-29
3.2.0-beta.18Review12026-05-29
3.2.0-beta.19Review12026-05-29

Block this in CI

PkgRadar gates @afosto/storefront (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @afosto/[email protected]