PkgRadar

npm · registry.npmjs.org

@decaf-ts/core

Credential file access: matched "NPM_TOKEN"

Scanned versions

VersionVerdictScoreScanned (UTC)
0.26.5Low risk02026-06-12
0.26.4Low risk02026-06-12
0.26.3Low risk02026-06-09
0.26.2Low risk02026-06-08
0.26.1Low risk02026-06-05
0.26.0Low risk02026-06-04
0.25.11Low risk02026-06-03
0.25.10Low risk02026-06-03
0.25.9Low risk02026-06-03
0.25.6Review12026-05-27
0.25.8Review12026-05-27
0.25.4Review12026-05-25
0.25.5Review12026-05-25
0.25.3Review12026-05-25
0.25.1Review302026-05-25
0.25.2Review302026-05-25

Block this in CI

PkgRadar gates @decaf-ts/core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @decaf-ts/[email protected]