PkgRadar

npm · registry.npmjs.org

aurelia-route-recognizer

Remote Dependency Spec: devDependencies.istanbul="github:gotwarlost/istanbul#source-map"

Why PkgRadar flagged 1.3.1

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.istanbul="github:gotwarlost/istanbul#source-map" · package.json
mediumRemote Dependency SpecdevDependencies.karma-coverage="github:douglasduteil/karma-coverage#next" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.1Review112026-05-28
1.3.2Review112026-05-28

Block this in CI

PkgRadar gates aurelia-route-recognizer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]