PkgRadar

npm · registry.npmjs.org

@cucumber/messages

Remote Dependency Spec: devDependencies.@cucumber/biome-config="github:cucumber/biome-config#v0.2.1"

Why PkgRadar flagged 33.0.2

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.@cucumber/biome-config="github:cucumber/biome-config#v0.2.1" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
11.0.1Low risk02026-06-10
33.0.2Review22026-06-10
10.0.2Low risk02026-06-10
11.1.0Low risk02026-06-10
32.2.0Low risk02026-06-10
32.3.0Low risk02026-06-10
32.3.1Low risk02026-06-10
11.1.1Low risk02026-06-10
33.0.1Review162026-06-10

Block this in CI

PkgRadar gates @cucumber/messages (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @cucumber/[email protected]