PkgRadar

npm · registry.npmjs.org

@t2-web/nft_land_js

Remote Dependency Spec: dependencies.@t2-web/nft_land_contracts="git+ssh://[email protected]/t2-web/nft_land_contracts.git#v2.1.11"

Why PkgRadar flagged 2.1.23

SeveritySignalEvidence
mediumRemote Dependency Specdependencies.@t2-web/nft_land_contracts="git+ssh://[email protected]/t2-web/nft_land_contracts.git#v2.1.11" · package.json
mediumNew Remote Dependency Vs Previousdependencies.@t2-web/nft_land_contracts added in 2.1.23 vs 2.1.22: "git+ssh://[email protected]/t2-web/nft_land_contracts.git#v2.1.11" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
2.1.23Review242026-06-05
2.1.22Review162026-06-03
2.1.21Review122026-06-03

Block this in CI

PkgRadar gates @t2-web/nft_land_js (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @t2-web/[email protected]