PkgRadar

npm · registry.npmjs.org

@vue-skuilder/common

Remote Payload: matched "curl "

Why PkgRadar flagged 0.2.7

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/docker/CouchDBManager.mjs
mediumRemote Payloadmatched "curl " · package/src/docker/CouchDBManager.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.7Review122026-06-09
0.2.5Review122026-06-05
0.2.4Review122026-06-02
0.2.3Review122026-06-01
0.2.2Review122026-05-31
0.2.1Review162026-05-27
0.1.40Review162026-05-25
0.2.0Review162026-05-25

Block this in CI

PkgRadar gates @vue-skuilder/common (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vue-skuilder/[email protected]