npm · registry.npmjs.org

@dataform/cli

Known Indicator Filename: package/bundle.js

Why PkgRadar flagged 3.0.58

Severity	Signal	Evidence
high	Known Indicator Filename	package/bundle.js · package/bundle.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.0.59`	Low risk	0	2026-06-02
`3.0.56`	Low risk	0	2026-05-30
`3.0.57`	Low risk	0	2026-05-30
`3.0.58`	Review	13	2026-05-26

Block this in CI

PkgRadar gates @dataform/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @dataform/[email protected]