PkgRadar

npm · registry.npmjs.org

@upstash/ratelimit

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260613010505

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/index.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/index.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260613010505Review72026-06-13
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260612010700Review72026-06-12
2.0.8Review72026-06-11
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260611010326Review72026-06-11
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260610010358Review72026-06-10
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260609005649Review72026-06-10
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260608010454Review72026-06-08
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260607010429Review72026-06-07
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260606005806Review72026-06-06
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260605010145Review72026-06-05
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260604011005Review72026-06-04
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260603011046Review72026-06-03
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260602010410Review72026-06-02
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260601010517Review72026-06-01
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260531010149Review72026-05-31
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260530005648Review72026-05-31
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260529010109Review72026-05-29
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260528005324Review72026-05-28
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260527005856Review72026-05-27
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260526005612Review72026-05-26
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260525005940Review242026-05-25
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260523005521Review242026-05-24
0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260524005827Review242026-05-24

Block this in CI

PkgRadar gates @upstash/ratelimit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @upstash/ratelimit@0.0.0-ci.5b5448a5f0bae809cd624a7c639771a8b2e227cb-20260613010505