PkgRadar

npm · registry.npmjs.org

@docusaurus/types

Manifest Codeless Dependency Stub: package ships no JS/TS source but declares 10 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape

Why PkgRadar flagged 3.10.1-canary-6652

SeveritySignalEvidence
mediumManifest Codeless Dependency Stubpackage ships no JS/TS source but declares 10 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
3.10.1-canary-6655Low risk02026-06-04
3.10.1-canary-6654Low risk02026-06-04
3.10.1-canary-6652Review42026-06-02
3.10.1-canary-6653Review42026-06-02
3.10.1-canary-6650Review42026-06-01
3.10.1-canary-6651Review42026-06-01
3.10.1-canary-6645Low risk02026-05-29
3.10.1-canary-6646Low risk02026-05-29
3.10.1-canary-6639Low risk02026-05-28
3.10.1-canary-6640Low risk02026-05-28
3.10.1-canary-6635Low risk02026-05-28
3.10.1-canary-6636Low risk02026-05-28

Block this in CI

PkgRadar gates @docusaurus/types (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @docusaurus/[email protected]
Start free — 25 scans / moView full evidence