npm · registry.npmjs.org
@mescius/wijmo.knockout.all
Manifest Codeless Dependency Stub: package ships no JS/TS source but declares 19 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape
Why PkgRadar flagged 5.20262.53-nightly.d20260612.t171109
| Severity | Signal | Evidence |
|---|---|---|
| medium | Manifest Codeless Dependency Stub | package ships no JS/TS source but declares 19 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
5.20262.53-nightly.d20260612.t171109 | Review | 7 | 2026-06-12 |
5.20261.52-rc | Review | 7 | 2026-06-12 |
5.20261.51-nightly.d20260612.t014144 | Review | 7 | 2026-06-12 |
5.20261.51-nightly.d20260611.t160617 | Review | 7 | 2026-06-11 |
5.20261.51-nightly.d20260611.t112051 | Review | 7 | 2026-06-11 |
5.20261.51-nightly.d20260611.t041520 | Review | 7 | 2026-06-11 |
5.20261.50 | Review | 7 | 2026-06-10 |
5.20261.51-nightly.d20260610.t201239 | Review | 7 | 2026-06-10 |
5.20261.51-nightly.d20260609.t200823 | Review | 7 | 2026-06-09 |
5.20261.51-nightly.d20260608.t204119 | Review | 7 | 2026-06-08 |
5.20261.51-nightly.d20260605.t195721 | Review | 7 | 2026-06-05 |
5.20261.51-nightly.d20260604.t195907 | Review | 7 | 2026-06-04 |
5.20261.51-nightly.d20260603.t195332 | Review | 7 | 2026-06-03 |
5.20261.51-nightly.d20260602.t202320 | Review | 7 | 2026-06-02 |
5.20261.51-nightly.d20260601.t200511 | Review | 7 | 2026-06-01 |
5.20261.51-nightly.d20260529.t201513 | Low risk | 0 | 2026-05-29 |
5.20261.51-nightly.d20260528.t201413 | Low risk | 0 | 2026-05-28 |
5.20261.51-nightly.d20260527.t205048 | Low risk | 0 | 2026-05-28 |
5.20261.51-nightly.d20260527.t011028 | Low risk | 0 | 2026-05-27 |
5.20261.51-nightly.d20260519.t174413 | Low risk | 0 | 2026-05-27 |
Block this in CI
pkgradar gate --ecosystem npm @mescius/[email protected]