PkgRadar

npm · registry.npmjs.org

create-content-sdk-app

Invalid Package Json: package.json is not valid JSON

Why PkgRadar flagged 2.2.0-canary.20260604121341

SeveritySignalEvidence
mediumInvalid Package Jsonpackage.json is not valid JSON · package/dist/templates/angular/package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
2.2.0-canary.20260605070452Low risk02026-06-05
2.2.0-canary.20260604121341Review72026-06-04
1.6.1-canary.20260603184025Low risk02026-06-03
1.6.1-canary.20260603185307Low risk02026-06-03
2.2.0-canary.20260528194647Low risk02026-05-28
2.2.0-canary.20260527110239Low risk02026-05-27
2.2.0-canary.20260525085832Low risk02026-05-25
2.1.1-canary.20260522122817Low risk02026-05-25
2.1.1-canary.20260521052552Low risk02026-05-25

Block this in CI

PkgRadar gates create-content-sdk-app (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]