PkgRadar

npm · registry.npmjs.org

@alexjbarnes/cockpit

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.4.1

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/.next/server/app/api/version/changelog/route.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/.next/server/app/api/version/cockpit/changelog/route.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.4.1Review492026-06-13
0.4.0Review492026-06-11
0.3.1Review902026-05-30
0.2.0Review662026-05-30
0.3.0Review902026-05-30

Block this in CI

PkgRadar gates @alexjbarnes/cockpit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @alexjbarnes/[email protected]