PkgRadar

npm · registry.npmjs.org

agent-relay-plugin

Manifest Codeless Dependency Stub: package ships no JS/TS source but declares 1 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape

Why PkgRadar flagged 0.63.2

SeveritySignalEvidence
mediumManifest Codeless Dependency Stubpackage ships no JS/TS source but declares 1 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.63.2Review152026-06-17
0.63.1Review102026-06-17
0.63.0Review102026-06-17
0.62.3Review102026-06-16
0.62.2Review102026-06-16
0.62.1Review152026-06-16
0.62.0Review102026-06-16
0.61.1Review102026-06-16
0.61.2Review102026-06-16
0.61.0Review152026-06-16
0.60.1Review102026-06-15
0.60.0Review102026-06-15
0.59.0Review102026-06-15
0.58.0Review152026-06-15
0.57.2Review102026-06-15
0.57.1Review102026-06-15
0.57.0Review102026-06-15
0.56.2Review102026-06-14
0.56.1Review102026-06-14
0.56.0Review102026-06-14
0.54.0Review102026-06-14
0.55.0Review102026-06-14
0.53.0Review102026-06-14
0.52.0Review102026-06-14
0.51.0Review102026-06-14
0.50.0Review102026-06-14
0.49.0Review102026-06-14
0.48.0Review102026-06-14
0.47.0Review102026-06-14
0.46.0Review102026-06-14
0.45.0Review102026-06-14
0.44.0Review102026-06-14
0.43.0Review102026-06-14
0.42.0Review102026-06-14
0.41.0Review102026-06-13
0.40.0Review102026-06-13
0.39.0Review102026-06-13
0.38.0Review102026-06-13
0.37.0Review102026-06-12
0.36.2Review102026-06-12
0.36.1Review102026-06-12
0.36.0Review102026-06-12
0.35.4Review102026-06-12
0.35.3Review102026-06-12
0.35.1Review152026-06-12
0.35.2Review152026-06-12
0.35.0Review152026-06-12
0.34.1Review102026-06-12
0.34.0Review152026-06-11
0.33.1Review102026-06-11
0.33.0Review102026-06-11
0.32.4Review152026-06-11
0.32.3Review152026-06-11
0.32.2Review152026-06-10
0.32.1Review152026-06-10
0.31.1Review102026-06-10
0.31.0Review152026-06-10
0.30.0Review152026-06-10
0.30.1Review152026-06-10
0.29.0Review152026-06-10
0.28.0Review152026-06-10
0.27.2Review102026-06-10
0.27.1Review102026-06-10
0.27.0Review102026-06-09
0.26.0Review102026-06-09
0.25.0Review102026-06-09
0.24.0Review152026-06-09
0.23.0Review102026-06-09
0.22.0Review102026-06-09
0.21.0Review102026-06-08
0.20.0Review152026-06-08
0.19.3Review102026-06-08
0.19.2Review102026-06-07
0.19.1Review102026-06-07
0.19.0Review102026-06-07
0.18.0Review102026-06-06
0.17.0Review102026-06-06
0.16.0Review102026-06-06
0.15.1Review152026-06-05
0.15.0Review152026-06-05
0.14.0Review102026-06-05
0.12.4Review102026-06-05
0.13.0Review102026-06-05
0.12.3Review152026-06-04
0.12.1Review152026-06-04
0.12.2Review152026-06-04
0.11.8Review152026-06-04
0.11.6Review152026-06-03
0.11.5Review152026-06-03
0.11.4Review152026-06-03
0.11.3Review152026-06-02
0.11.2Review152026-06-02
0.11.1Review152026-06-02
0.10.26Review152026-06-01
0.10.25Review152026-06-01
0.10.23Review152026-06-01
0.10.24Review152026-06-01
0.10.21Low risk02026-05-31
0.10.19Low risk02026-05-30
0.10.20Low risk02026-05-30

Block this in CI

PkgRadar gates agent-relay-plugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence