npm · registry.npmjs.org

@typescript-deploys/monaco-editor

Remote Dependency Spec: devDependencies.uncss="https://github.com/uncss/uncss.git#d0adf4bb89ef4f82006f8dd5b40d22a94269e50a"

Why PkgRadar flagged 4.6.0-dev.20211115

Severity	Signal	Evidence
high	New Lifecycle Script Vs Previous	postinstall added in 4.6.0-dev.20211115 vs 4.6.0-dev.20211105: "node build/postinstall.js" · package.json
medium	Remote Dependency Spec	devDependencies.uncss="https://github.com/uncss/uncss.git#d0adf4bb89ef4f82006f8dd5b40d22a94269e50a" · package.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`4.5.1-rc`	Review	2	2026-06-17
`4.6.0-dev.20211104`	Review	2	2026-06-17
`4.6.0-dev.20211105`	Review	2	2026-06-17
`4.6.0-dev.20211115`	High risk	53	2026-06-17

Campaign attribution

Block this in CI

PkgRadar gates @typescript-deploys/monaco-editor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @typescript-deploys/[email protected]