PkgRadar

npm · registry.npmjs.org

@alibaba-group/open-code-review

Install-time lifecycle script: postinstall="node scripts/install.js"

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.5Review32026-06-13
1.3.4Review32026-06-12
1.3.1Review32026-06-10
1.3.0Review32026-06-09
1.2.6Review52026-06-09
1.2.5Review52026-06-08
1.2.4Review52026-06-07
1.2.3Review32026-06-07
1.2.2Review52026-06-06
1.2.1Review32026-06-06
1.2.0Review32026-06-06
1.1.22Review32026-06-06
1.1.21Review52026-06-05
1.1.20Review52026-06-05
1.1.19Review32026-06-05
1.1.18Review32026-06-04
1.1.17Review32026-06-04
1.1.16Review52026-06-04
1.1.15Review52026-06-04
1.1.14Review32026-06-03
1.1.13Review32026-06-03
1.1.12Review32026-06-03
1.1.11Review32026-06-02
1.1.10Review32026-06-02
1.1.9Review32026-06-01
1.1.7Review52026-05-30
1.1.8Review52026-05-30
1.1.6Review52026-05-30
1.1.4Review52026-05-30
1.1.3Review52026-05-30

Block this in CI

PkgRadar gates @alibaba-group/open-code-review (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @alibaba-group/[email protected]
Start free — 25 scans / moView full evidence