PkgRadar

npm · registry.npmjs.org

@woovi/ui

Remote Dependency Spec: dependencies.xlsx="https://cdn.sheetjs.com/xlsx-0.20.0/xlsx-0.20.0.tgz"

Why PkgRadar flagged 6.9.8

SeveritySignalEvidence
highRemote Dependency Specdependencies.xlsx="https://cdn.sheetjs.com/xlsx-0.20.0/xlsx-0.20.0.tgz" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
6.9.8High risk62026-06-10
6.9.7Review62026-05-28
6.9.5Review62026-05-26
6.9.6Review62026-05-26

Block this in CI

PkgRadar gates @woovi/ui (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @woovi/[email protected]