PkgRadar

npm · registry.npmjs.org

@fedify/relay

Remote Payload: matched "cUrl "

Why PkgRadar flagged 2.3.0-dev.1336

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/dist/types-B4XuG2sR.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.3.0-dev.1336Review32026-06-16
2.3.0-dev.1299Review32026-06-11
2.3.0-dev.1281Review32026-06-10
2.3.0-dev.1280Review32026-06-10
2.3.0-dev.1273Review32026-06-09
2.3.0-dev.1274Review32026-06-09
2.3.0-dev.1258Review32026-06-07
2.3.0-dev.1219Review32026-06-05
2.2.5Review32026-06-05
2.1.16Review32026-06-05
2.0.20Review32026-06-05
2.3.0-dev.1214Review32026-06-05
2.3.0-dev.1213Review32026-06-04
2.2.4Review32026-06-04
2.3.0-dev.1212Review32026-06-04
2.1.15Review32026-06-04
2.0.19Review32026-06-04
2.3.0-dev.1190Review32026-06-01
2.3.0-dev.1189Review32026-06-01
2.3.0-dev.1184Review32026-05-28
2.3.0-dev.1158Review32026-05-25
2.3.0-dev.1172Review32026-05-25

Block this in CI

PkgRadar gates @fedify/relay (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @fedify/[email protected]