PkgRadar

npm · registry.npmjs.org

@zimbra/zimlet-cli

Remote Dependency Spec: devDependencies.preact-router="github:zimbra/preact-router#4.1.2_base_path_support"

Why PkgRadar flagged 18.9.1-PREAPPS-9251.a0c77cb.0

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.preact-router="github:zimbra/preact-router#4.1.2_base_path_support" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
18.9.1-PREAPPS-9251.a0c77cb.0Review22026-06-12
18.10.0Review22026-06-10
18.9.1-PREAPPS-9251.86a635c.0Review22026-06-09
18.9.1-PREAPPS-9251.3372b39.0Review162026-06-03
18.9.1-PREAPPS-9204.646b1fc.0Review162026-06-03
18.9.1-PREAPPS-9263.56d21d0.0Review162026-06-03
18.9.1-PREAPPS-9222.ef41fed.0Review22026-05-27
18.9.1-email-templates-zimlet.89d3634.0Review22026-05-27

Block this in CI

PkgRadar gates @zimbra/zimlet-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @zimbra/[email protected]