npm · registry.npmjs.org

@welshman/signer

Remote Dependency Spec: devDependencies.nostr-signer-capacitor-plugin="github:coracle-social/nostr-signer-capacitor-plugin#main"

Why PkgRadar flagged 0.8.15

Severity	Signal	Evidence
medium	Remote Dependency Spec	devDependencies.nostr-signer-capacitor-plugin="github:coracle-social/nostr-signer-capacitor-plugin#main" · package.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.8.15`	Review	4	2026-05-28
`0.8.16`	Review	4	2026-05-28

Block this in CI

PkgRadar gates @welshman/signer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @welshman/[email protected]