PkgRadar

npm · registry.npmjs.org

@vtex/cli-plugin-workspace

Remote Dependency Spec: devDependencies.nodemon-notifier-cli="https://github.com/Slessi/nodemon-notifier-cli.git"

Why PkgRadar flagged 1.1.6-beta.0

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.nodemon-notifier-cli="https://github.com/Slessi/nodemon-notifier-cli.git" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.6-beta.0Review42026-06-11
1.1.6-beta.2Review42026-06-11
1.1.6-beta.3Review42026-06-11
1.2.0Review42026-06-11

Block this in CI

PkgRadar gates @vtex/cli-plugin-workspace (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vtex/[email protected]