PkgRadar

npm · registry.npmjs.org

@ryanfw/prompt-orchestration-pipeline

Remote Dependency Spec: dependencies.local-llm-cli-adapter="github:ryan-mahoney/local-llm-cli-adapter#2ea1aa2d8e8dbe43eb845eb4730b08a02618f476"

Why PkgRadar flagged 1.3.1

SeveritySignalEvidence
mediumRemote Dependency Specdependencies.local-llm-cli-adapter="github:ryan-mahoney/local-llm-cli-adapter#2ea1aa2d8e8dbe43eb845eb4730b08a02618f476" · package.json
mediumNew Remote Dependency Vs Previousdependencies.local-llm-cli-adapter added in 1.3.1 vs 1.3.0: "github:ryan-mahoney/local-llm-cli-adapter#2ea1aa2d8e8dbe43eb845eb4730b08a02618f476" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.1Review242026-06-18
1.2.10Low risk02026-06-13
1.3.0Low risk02026-06-13
1.2.11Low risk02026-05-29
1.2.12Low risk02026-05-29

Block this in CI

PkgRadar gates @ryanfw/prompt-orchestration-pipeline (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ryanfw/[email protected]