PkgRadar

npm · registry.npmjs.org

@storm-software/tsconfig

Manifest Codeless Dependency Stub: package ships no JS/TS source but declares 1 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape

Why PkgRadar flagged 0.48.107

SeveritySignalEvidence
mediumManifest Codeless Dependency Stubpackage ships no JS/TS source but declares 1 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.48.122Low risk02026-06-13
0.48.121Low risk02026-06-13
0.48.120Low risk02026-06-11
0.48.119Low risk02026-06-11
0.48.118Low risk02026-06-11
0.48.117Low risk02026-06-10
0.48.116Low risk02026-06-10
0.48.115Low risk02026-06-10
0.48.114Low risk02026-06-10
0.48.113Low risk02026-06-08
0.48.112Low risk02026-06-08
0.48.111Low risk02026-06-08
0.48.110Low risk02026-06-08
0.48.109Low risk02026-06-08
0.48.108Low risk02026-06-08
0.48.107Review72026-06-02
0.48.106Review72026-06-02
0.48.105Review72026-06-01
0.48.104Low risk02026-05-30
0.48.103Low risk02026-05-30
0.48.102Low risk02026-05-30
0.48.101Low risk02026-05-28
0.48.99Low risk02026-05-27
0.48.100Low risk02026-05-27
0.48.96Low risk02026-05-25
0.48.97Low risk02026-05-25

Block this in CI

PkgRadar gates @storm-software/tsconfig (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @storm-software/[email protected]
Start free — 25 scans / moView full evidence