npm · registry.npmjs.org

@commercelayer/sdk

Known Indicator Filename: package/lib/bundle.js

Why PkgRadar flagged 8.0.0-beta.4

Severity	Signal	Evidence
high	Known Indicator Filename	package/lib/bundle.js · package/lib/bundle.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`8.0.0-beta.6`	Low risk	0	2026-05-28
`8.0.0-beta.4`	Review	13	2026-05-25
`8.0.0-beta.5`	Review	13	2026-05-25

Block this in CI

PkgRadar gates @commercelayer/sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @commercelayer/[email protected]