PkgRadar

npm · registry.npmjs.org

@bablr/language_enhancer-en-jsx

Remote Dependency Spec: devDependencies.@bablr/eslint-config-base="github:bablr-lang/eslint-config-base#23b94fb3bdfdbc3ac7ed9cb58d7979d8f07dce2b"

Why PkgRadar flagged 0.4.0

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.@bablr/eslint-config-base="github:bablr-lang/eslint-config-base#23b94fb3bdfdbc3ac7ed9cb58d7979d8f07dce2b" · package.json
mediumDependency Changed To Remote Vs PreviousdevDependencies.@bablr/eslint-config-base changed to remote spec in 0.4.0 vs 0.3.3: "github:bablr-lang/eslint-config-base#23b94fb3bdfdbc3ac7ed9cb58d7979d8f07dce2b" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.4.0Review162026-06-03
0.4.1Review82026-05-24

Block this in CI

PkgRadar gates @bablr/language_enhancer-en-jsx (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @bablr/[email protected]