PkgRadar

npm · registry.npmjs.org

@ama-openapi/create

Manifest Codeless Dependency Stub: package ships no JS/TS source but declares 6 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape

Why PkgRadar flagged 14.5.0-prerelease.5

SeveritySignalEvidence
mediumManifest Codeless Dependency Stubpackage ships no JS/TS source but declares 6 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
14.5.0-prerelease.5Review42026-06-12
14.5.0-prerelease.4Review42026-06-12
14.5.0-prerelease.3Review42026-06-11
14.5.0-prerelease.2Review42026-06-11
14.5.0-prerelease.1Low risk02026-06-10
14.4.0-rc.0Low risk02026-06-08
14.5.0-prerelease.0Review42026-06-08
14.4.0-prerelease.27Review42026-06-08
14.4.0-prerelease.26Review42026-06-08
14.4.0-prerelease.25Review42026-06-08
14.4.0-prerelease.24Review42026-06-05
14.4.0-prerelease.23Review42026-06-05
14.4.0-prerelease.22Review42026-06-04
14.4.0-prerelease.21Review42026-06-03
14.4.0-prerelease.20Review42026-06-03
14.4.0-prerelease.19Review42026-06-02
14.4.0-prerelease.18Review42026-06-02
14.4.0-prerelease.17Review42026-06-02
14.4.0-prerelease.16Review42026-06-02
14.4.0-prerelease.15Review42026-06-02
14.4.0-prerelease.14Review42026-06-01
14.4.0-prerelease.13Review42026-06-01
14.4.0-prerelease.12Review42026-06-01
14.4.0-prerelease.11Low risk02026-05-29
14.4.0-prerelease.10Low risk02026-05-28
14.4.0-prerelease.9Low risk02026-05-28
14.3.2Low risk02026-05-28
14.4.0-prerelease.8Low risk02026-05-28
14.4.0-prerelease.7Low risk02026-05-27
14.4.0-prerelease.6Low risk02026-05-27
14.1.11Low risk02026-05-27
14.4.0-prerelease.5Low risk02026-05-26
14.3.1Low risk02026-05-26

Block this in CI

PkgRadar gates @ama-openapi/create (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ama-openapi/[email protected]
Start free — 25 scans / moView full evidence