PkgRadar

npm · registry.npmjs.org

@vtex/cli-plugin-whoami

Remote Dependency Spec: devDependencies.nodemon-notifier-cli="https://github.com/Slessi/nodemon-notifier-cli.git"

Why PkgRadar flagged 0.2.1-beta

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.nodemon-notifier-cli="https://github.com/Slessi/nodemon-notifier-cli.git" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.1-betaReview82026-06-11
0.2.2-betaReview82026-06-11
0.2.2-beta2Review82026-06-11
0.2.2Review52026-06-11

Block this in CI

PkgRadar gates @vtex/cli-plugin-whoami (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vtex/[email protected]