PkgRadar

npm · registry.npmjs.org

@shopify/ui-extensions

Remote Dependency Spec: devDependencies.@shopify/generate-docs="https://registry.npmjs.org/@shopify/generate-docs/-/generate-docs-1.1.0.tgz"

Why PkgRadar flagged 2026.4.0

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.@shopify/generate-docs="https://registry.npmjs.org/@shopify/generate-docs/-/generate-docs-1.1.0.tgz" · package.json
mediumDependency Changed To Remote Vs PreviousdevDependencies.@shopify/generate-docs changed to remote spec in 2026.4.0 vs 2026.4.0-rc.3: "https://registry.npmjs.org/@shopify/generate-docs/-/generate-docs-1.1.0.tgz" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-snapshot-20260611190756Low risk02026-06-11
0.0.0-snapshot-20250827133940Low risk02026-06-10
0.0.0-snapshot-20250827174740Low risk02026-06-10
0.0.0-snapshot-20250827122629Low risk02026-06-10
2026.4.0Review162026-06-10
2026.7.0-rc.6Low risk02026-06-10
0.0.0-snapshot-20260608163423Low risk02026-06-08
0.0.0-snapshot-20260605230548Low risk02026-06-05
0.0.0-snapshot-20260604193151Low risk02026-06-04
0.0.0-snapshot-20260528081022Low risk02026-05-28
2025.10.15Low risk02026-05-28
2026.1.4Low risk02026-05-27
2026.4.3Low risk02026-05-27
0.0.0-snapshot-20260515002710Review22026-05-26
0.0.0-snapshot-20260526000817Low risk02026-05-26

Block this in CI

PkgRadar gates @shopify/ui-extensions (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @shopify/[email protected]
Start free — 25 scans / moView full evidence