PkgRadar

npm · registry.npmjs.org

@ziex/cli

Manifest Codeless Dependency Stub: package ships no JS/TS source but declares 6 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape

Why PkgRadar flagged 0.1.0-dev.1252

SeveritySignalEvidence
mediumManifest Codeless Dependency Stubpackage ships no JS/TS source but declares 6 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.0-dev.1252Review42026-06-16
0.1.0-dev.1232Review42026-06-14
0.1.0-dev.1227Review42026-06-12
0.1.0-dev.1177Review42026-06-10
0.1.0-dev.1152Review42026-06-07
0.1.0-dev.1151Review42026-06-07
0.1.0-dev.1146Review42026-06-07
0.1.0-dev.1144Review42026-06-06
0.1.0-dev.1143Review42026-06-06
0.1.0-dev.1138Review42026-06-06
0.1.0-dev.1103Review42026-05-31
0.1.0-dev.1050Low risk02026-05-29
0.1.0-dev.1068Low risk02026-05-29

Block this in CI

PkgRadar gates @ziex/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ziex/[email protected]
Start free — 25 scans / moView full evidence