PkgRadar

npm · registry.npmjs.org

@lowdefy/build

Credential file access: matched "GITHUB_TOKEN"

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-experimental-20260612081926Low risk02026-06-12
0.0.0-experimental-20260611102401Low risk02026-06-11
0.0.0-experimental-20260610101734Low risk02026-06-10
5.3.0Low risk02026-06-10
0.0.0-experimental-20260610091556Low risk02026-06-10
0.0.0-experimental-20260608135213Low risk02026-06-08
0.0.0-experimental-20260603212059Low risk02026-06-03
0.0.0-experimental-20260603143221Low risk02026-06-03
0.0.0-experimental-20260603082728Low risk02026-06-03
0.0.0-experimental-20260602160131Low risk02026-06-02
0.0.0-experimental-20260601102156Low risk02026-06-01
0.0.0-experimental-20260526123919Review12026-05-26
0.0.0-experimental-20260514082957Review22026-05-25
0.0.0-experimental-20260525131701Review22026-05-25

Block this in CI

PkgRadar gates @lowdefy/build (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @lowdefy/[email protected]
Start free — 25 scans / moView full evidence