PkgRadar

npm · registry.npmjs.org

@foerderfunke/matching-engine

Remote Dependency Spec: dependencies.shacl-engine="github:rdf-ext/shacl-engine#sparql"

Why PkgRadar flagged 0.2.2

SeveritySignalEvidence
mediumRemote Dependency Specdependencies.shacl-engine="github:rdf-ext/shacl-engine#sparql" · package.json
mediumNew Remote Dependency Vs Previousdependencies.shacl-engine added in 0.2.2 vs 0.2.1: "github:rdf-ext/shacl-engine#sparql" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.7.4Low risk02026-06-10
0.2.2Review242026-06-10
1.5.7Low risk02026-06-10
1.5.8Low risk02026-06-10
1.5.6Low risk02026-06-10
0.2.3Review62026-06-10
1.5.9Low risk02026-06-10

Block this in CI

PkgRadar gates @foerderfunke/matching-engine (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @foerderfunke/[email protected]