PkgRadar

npm · registry.npmjs.org

crossws

Remote Dependency Spec: devDependencies.uWebSockets.js="github:uNetworking/uWebSockets.js#v20.57.0"

Why PkgRadar flagged 0.4.3

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.uWebSockets.js="github:uNetworking/uWebSockets.js#v20.57.0" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.4.3Review42026-06-09
0.4.4Review22026-06-09
0.4.5Review22026-06-09
0.4.6Review22026-06-09

Block this in CI

PkgRadar gates crossws (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]