npm · registry.npmjs.org

@tscircuit/ngspice-spice-engine

Remote Dependency Spec: dependencies.@tscircuit/eecircuit-engine="https://jscdn.tscircuit.com/@tscircuit/eecircuit-engine/1.7.2.tgz"

Why PkgRadar flagged 0.0.12

Severity	Signal	Evidence
high	Remote Dependency Spec	dependencies.@tscircuit/eecircuit-engine="https://jscdn.tscircuit.com/@tscircuit/eecircuit-engine/1.7.2.tgz" · package.json
high	New Remote Dependency Vs Previous	dependencies.@tscircuit/eecircuit-engine added in 0.0.12 vs 0.0.11: "https://jscdn.tscircuit.com/@tscircuit/eecircuit-engine/1.7.2.tgz" · package.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.0.12`	High risk	24	2026-06-14
`0.0.11`	Low risk	0	2026-06-12
`0.0.10`	Low risk	0	2026-06-11
`0.0.7`	Low risk	0	2026-06-11
`0.0.8`	Low risk	0	2026-06-04
`0.0.9`	Low risk	0	2026-06-04

Block this in CI

PkgRadar gates @tscircuit/ngspice-spice-engine (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @tscircuit/[email protected]