PkgRadar

npm · registry.npmjs.org

@ctxr/skill-code-review

Remote Dependency Spec: dependencies.@ctxr/fsm="git+https://github.com/ctxr-dev/fsm.git#a4368c867f23d0bf6d61c58a0fb36e0dab4f11bd"

Why PkgRadar flagged 2.3.1

SeveritySignalEvidence
mediumRemote Dependency Specdependencies.@ctxr/fsm="git+https://github.com/ctxr-dev/fsm.git#a4368c867f23d0bf6d61c58a0fb36e0dab4f11bd" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
2.3.1Review122026-05-29
2.5.1Review122026-05-29

Block this in CI

PkgRadar gates @ctxr/skill-code-review (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ctxr/[email protected]