PkgRadar

npm · registry.npmjs.org

@mmnto/totem

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 1.49.3

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/sarif.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.62.0Low risk02026-06-13
1.61.0Low risk02026-06-12
1.60.0Low risk02026-06-12
1.59.1Low risk02026-06-11
1.59.0Low risk02026-06-11
1.58.0Low risk02026-06-11
1.58.1Low risk02026-06-11
1.57.0Low risk02026-06-10
1.56.0Low risk02026-06-09
1.55.1Low risk02026-06-08
1.55.0Low risk02026-06-08
1.54.1Low risk02026-06-07
1.54.0Low risk02026-06-07
1.53.8Low risk02026-06-06
1.53.9Low risk02026-06-06
1.53.7Low risk02026-06-05
1.53.6Low risk02026-06-05
1.53.5Low risk02026-06-03
1.53.4Low risk02026-06-03
1.53.3Low risk02026-06-02
1.53.2Low risk02026-06-01
1.53.1Low risk02026-06-01
1.53.0Low risk02026-06-01
1.52.0Low risk02026-05-31
1.51.0Low risk02026-05-30
1.50.0Low risk02026-05-27
1.49.3Review122026-05-25
1.49.2Review122026-05-24
1.49.1Review122026-05-24

Block this in CI

PkgRadar gates @mmnto/totem (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mmnto/[email protected]