PkgRadar

npm · registry.npmjs.org

@twinmatrix/spatialverse-sdk-web

Remote Dependency Spec: dependencies.@mapbox/mapbox-gl-draw="github:hamzzam/mapbox-gl-draw#v1.4.1-touch-events-hotfix"

Why PkgRadar flagged 3.1.5

SeveritySignalEvidence
mediumRemote Dependency Specdependencies.@mapbox/mapbox-gl-draw="github:hamzzam/mapbox-gl-draw#v1.4.1-touch-events-hotfix" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
3.1.5Review122026-06-12
3.1.6Review122026-06-12
3.1.7Review122026-06-12
3.1.8Review122026-06-12

Block this in CI

PkgRadar gates @twinmatrix/spatialverse-sdk-web (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @twinmatrix/[email protected]