PkgRadar

npm · registry.npmjs.org

@feedmepos/merge-css

Manifest Codeless Dependency Stub: package ships no JS/TS source but declares 2 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape

Why PkgRadar flagged 1.0.0-prod.20260612.231123

SeveritySignalEvidence
mediumManifest Codeless Dependency Stubpackage ships no JS/TS source but declares 2 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0-prod.20260612.231123Review72026-06-12
1.0.0-dev.20260612.204623Review72026-06-12
1.0.0-dev.20260612.181550Review72026-06-12
1.0.0-uat.20260612.181549Review72026-06-12
1.0.0-dev.20260612.165953Review72026-06-12
1.0.0-prod.20260612.161200Review72026-06-12
1.0.0-dev.20260612.165822Review72026-06-12
1.0.0-dev.20260612.160943Review72026-06-12
1.0.0-dev.20260612.141245Review72026-06-12
1.0.0-dev.20260612.140318Review72026-06-12
1.0.0-dev.20260612.121843Review72026-06-12
1.0.0-prod.20260612.105511Review72026-06-12
1.0.0-dev.20260612.104848Review72026-06-12
1.0.0-dev.20260611.223944Review72026-06-11
1.0.0-dev.20260611.190213Review72026-06-11
1.0.0-prod.20260611.162730Review72026-06-11
1.0.0-dev.20260611.161609Review72026-06-11
1.0.0-prod.20260611.160420Review72026-06-11
1.0.0-dev.20260611.160438Review72026-06-11
1.0.0-prod.20260611.155451Review72026-06-11
1.0.0-dev.20260611.154430Review72026-06-11
1.0.0-prod.20260611.153705Review72026-06-11
1.0.0-dev.20260611.145611Review72026-06-11
1.0.0-prod.20260611.143344Review72026-06-11
1.0.0-dev.20260611.131724Review72026-06-11
1.0.0-prod.20260611.143314Review72026-06-11
1.0.0-prod.20260610.190507Review72026-06-10
1.0.0-dev.20260610.225323Review72026-06-10
1.0.0-dev.20260610.185039Review72026-06-10
1.0.0-dev.20260610.184401Review72026-06-10
1.0.0-prod.20260610.150425Review72026-06-10
1.0.0-dev.20260610.162638Review72026-06-10
1.0.0-dev.20260610.143602Review72026-06-10
1.0.0-dev.20260610.141911Review72026-06-10
1.0.0-prod.20260610.124302Review72026-06-10
1.0.0-prod.20260610.123319Review72026-06-10
1.0.1Review72026-06-10
1.0.0-prod.20260610.123244Review72026-06-10
1.0.0-dev.20260609.205707Review72026-06-09
1.0.0-dev.20260609.174534Review72026-06-09
1.0.0-dev.20260609.155651Review72026-06-09
1.0.0-prod.20260609.152814Review72026-06-09
1.0.0-dev.20260609.151113Review72026-06-09
1.0.0-dev.20260609.140427Review72026-06-09
1.0.0-prod.20260609.140406Review72026-06-09
1.0.0-dev.20260608.193559Review72026-06-09
1.0.0-dev.20260609.135921Review72026-06-09
1.0.0-prod.20260608.191415Review72026-06-08
1.0.0-dev.20260608.190938Review72026-06-08
1.0.0-dev.20260608.183218Review72026-06-08
1.0.0-dev.20260608.175459Review72026-06-08
1.0.0-dev.20260608.170825Review72026-06-08
1.0.0-dev.20260608.161751Review72026-06-08
1.0.0-dev.20260608.160021Review72026-06-08
1.0.0-dev.20260608.153849Review72026-06-08
1.0.0-dev.20260608.132201Review72026-06-08
1.0.0-dev.20260608.124824Review72026-06-08
1.0.0-prod.20260605.164359Review72026-06-05
1.0.0-dev.20260605.164414Review72026-06-05
1.0.0-prod.20260605.151724Review72026-06-05
1.0.0-dev.20260605.151640Review72026-06-05
1.0.0-prod.20260605.142933Review72026-06-05
1.0.0-dev.20260605.142146Review72026-06-05
1.0.0-dev.20260605.115518Review72026-06-05
1.0.0-dev.20260605.112717Review72026-06-05
1.0.0-prod.20260604.233800Review72026-06-04
1.0.0-prod.20260604.233530Review72026-06-04
1.0.0-dev.20260604.210031Review72026-06-04
1.0.0-dev.20260604.195456Review72026-06-04
1.0.0-uat.20260604.195450Review72026-06-04
1.0.0-prod.20260604.185043Review72026-06-04
1.0.0-prod.20260604.175837Review72026-06-04
1.0.0-dev.20260604.165337Review72026-06-04
1.0.0-dev.20260604.170846Review72026-06-04
1.0.0-prod.20260604.132223Review72026-06-04
1.0.0-dev.20260604.132234Review72026-06-04
1.0.0-prod.20260604.121306Review72026-06-04
1.0.0-dev.20260604.115447Review72026-06-04
1.0.0-dev.20260604.114838Review72026-06-04
1.0.0-dev.20260604.113307Review72026-06-04
1.0.0-prod.20260604.104434Review72026-06-04
1.0.0-dev.20260604.103656Review72026-06-04
1.0.0-prod.20260603.194120Review72026-06-03
1.0.0-prod.20260603.163432Review72026-06-03
1.0.0-dev.20260603.160729Review72026-06-03
1.0.0-dev.20260603.155357Review72026-06-03
1.0.0-prod.20260603.154911Review72026-06-03
1.0.0-uat.20260603.145331Review72026-06-03
1.0.0-dev.20260603.145337Review72026-06-03
1.0.0-dev.20260603.123659Review72026-06-03
1.0.0-uat.20260603.122152Review72026-06-03
1.0.0-dev.20260603.122158Review72026-06-03
1.0.0-prod.20260603.121341Review72026-06-03
1.0.0-dev.20260603.121301Review72026-06-03
1.0.0-prod.20260603.104210Review72026-06-03
1.0.0-dev.20260603.103531Review72026-06-03
1.0.0-prod.20260602.234302Review72026-06-02
1.0.0-prod.20260602.182531Review72026-06-02
1.0.0-dev.20260602.182538Review72026-06-02
1.0.0-dev.20260602.165657Review72026-06-02
1.0.0-dev.20260602.155922Review72026-06-02
1.0.0-prod.20260602.92709Review72026-06-02
1.0.0-prod.20260601.221549Review72026-06-01
1.0.0-dev.20260529.164656Low risk02026-05-29
1.0.0-dev.20260529.161030Low risk02026-05-29
1.0.0-prod.20260529.114043Low risk02026-05-29
1.0.0-dev.20260529.120321Low risk02026-05-29
1.0.0-prod.20260528.221116Low risk02026-05-28
1.0.0-dev.20260528.223632Low risk02026-05-28
1.0.0-dev.20260527.235143Low risk02026-05-27
1.0.0-dev.20260527.235151Low risk02026-05-27
1.0.0-dev.20260527.140034Low risk02026-05-27
1.0.0-prod.20260527.140035Low risk02026-05-27
1.0.0-prod.20260527.12528Low risk02026-05-26
1.0.0-prod.20260527.20740Low risk02026-05-26
1.0.0-prod.20260526.165821Low risk02026-05-26
1.0.0-dev.20260526.182819Low risk02026-05-26
1.0.0-dev.20260526.151603Low risk02026-05-26
1.0.0-dev.20260526.140327Low risk02026-05-26
1.0.0-dev.20260526.131642Low risk02026-05-26
1.0.0-prod.20260526.132347Low risk02026-05-26
1.0.0-dev.20260526.115226Low risk02026-05-26
1.0.0-dev.20260526.113929Low risk02026-05-26
1.0.0-dev.20260526.11114Low risk02026-05-25
1.0.0-prod.20260526.11256Low risk02026-05-25
1.0.0-prod.20260525.230602Low risk02026-05-25
1.0.0-dev.20260525.183730Low risk02026-05-25
1.0.0-dev.20260525.185818Low risk02026-05-25
1.0.0-dev.20260525.144133Low risk02026-05-25
1.0.0-dev.20260525.120230Low risk02026-05-25
1.0.0-prod.20260525.114458Low risk02026-05-25
1.0.0-dev.20260523.231445Low risk02026-05-25

Block this in CI

PkgRadar gates @feedmepos/merge-css (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @feedmepos/[email protected]
Start free — 25 scans / moView full evidence