PkgRadar

npm · registry.npmjs.org

@dcl/social-rpc-client

Remote Dependency Spec: devDependencies.@dcl/protocol="https://sdk-team-cdn.decentraland.org/@dcl/protocol/branch//dcl-protocol-1.0.0-15850084249.commit-ce7a4eb.tgz"

Why PkgRadar flagged 2.0.0

SeveritySignalEvidence
highRemote Dependency SpecdevDependencies.@dcl/protocol="https://sdk-team-cdn.decentraland.org/@dcl/protocol/branch//dcl-protocol-1.0.0-15850084249.commit-ce7a4eb.tgz" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
2.0.0Review82026-05-28
2.0.1-20260518173028.commit-be0d2a7Review82026-05-28

Block this in CI

PkgRadar gates @dcl/social-rpc-client (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @dcl/[email protected]