PkgRadar

npm · registry.npmjs.org

@maizzle/framework

Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.

Why PkgRadar flagged 6.0.1

SeveritySignalEvidence
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/dist/server/ui/.vite/deps/vue-router.js

Scanned versions

VersionVerdictScoreScanned (UTC)
6.0.0-rc.1Low risk02026-06-16
6.0.1Review122026-06-16
6.0.0Review122026-06-09
6.0.0-rc.26Low risk02026-06-06
6.0.0-rc.25Low risk02026-06-04
6.0.0-rc.24Low risk02026-06-01
6.0.0-rc.23Review122026-05-24
6.0.0-rc.22Review122026-05-24

Block this in CI

PkgRadar gates @maizzle/framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @maizzle/[email protected]