PkgRadar

npm · registry.npmjs.org

@staffbase/create-staffbase-plugin

Invalid Package Json: package.json is not valid JSON

Why PkgRadar flagged 1.0.2

SeveritySignalEvidence
mediumInvalid Package Jsonpackage.json is not valid JSON · package/scaffoldTpl/node_modules/.staging/pug-07d9517d/package.json
mediumInvalid Package Jsonpackage.json is not valid JSON · package/scaffoldTpl/node_modules/.staging/safe-buffer-a8c9b6f6/package.json
mediumInvalid Package Jsonpackage.json is not valid JSON · package/scaffoldTpl/node_modules/.staging/setprototypeof-48015cdc/package.json
mediumInvalid Package Jsonpackage.json is not valid JSON · package/scaffoldTpl/node_modules/.staging/statuses-d12e9c9f/package.json
mediumInvalid Package Jsonpackage.json is not valid JSON · package/scaffoldTpl/node_modules/.staging/to-fast-properties-39085890/package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.2Review502026-06-11
1.0.6Low risk02026-06-11
1.0.14Low risk02026-06-11
1.0.15Low risk02026-06-11
1.0.8Low risk02026-06-11

Block this in CI

PkgRadar gates @staffbase/create-staffbase-plugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @staffbase/[email protected]