npm · registry.npmjs.org
@wellcometrust/pdfmake
Remote Dependency Spec: devDependencies.svg-to-pdfkit="github:alafr/SVG-to-PDFKit#b091ebd4e7b7d2310eb1003511cd5de480f7e0e1"
Why PkgRadar flagged 3.0.0
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Dependency Spec | devDependencies.svg-to-pdfkit="github:alafr/SVG-to-PDFKit#b091ebd4e7b7d2310eb1003511cd5de480f7e0e1" · package.json |
| medium | Dependency Changed To Remote Vs Previous | devDependencies.svg-to-pdfkit changed to remote spec in 3.0.0 vs 2.1.0: "github:alafr/SVG-to-PDFKit#b091ebd4e7b7d2310eb1003511cd5de480f7e0e1" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.0.0 | Review | 16 | 2026-06-03 |
3.0.1 | Review | 5 | 2026-06-02 |
Block this in CI
pkgradar gate --ecosystem npm @wellcometrust/[email protected]