PkgRadar

npm · registry.npmjs.org

@nmtjs/http-transport

Remote Dependency Spec: devDependencies.uWebSockets.js="github:uNetworking/uWebSockets.js#v20.63.0"

Why PkgRadar flagged 0.16.0

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.uWebSockets.js="github:uNetworking/uWebSockets.js#v20.63.0" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.16.0Review22026-06-10
0.15.3Review42026-06-10
0.16.0-beta.10Review42026-06-10
0.16.0-beta.11Review22026-06-10
0.16.0-beta.8Review42026-06-10
0.16.0-beta.9Review42026-06-10

Block this in CI

PkgRadar gates @nmtjs/http-transport (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @nmtjs/[email protected]