PkgRadar

npm · registry.npmjs.org

docthub-core-components

Install-time lifecycle script: postinstall="node node_modules/esbuild/install.js || echo esbuild-install-skipped"

Scanned versions

VersionVerdictScoreScanned (UTC)
3.2.8Review32026-06-09
3.2.7Review32026-06-05
3.2.6Review32026-06-03
3.2.5Review32026-06-02
3.2.4Review32026-05-30
3.2.2Review32026-05-30
3.2.3Review32026-05-30

Block this in CI

PkgRadar gates docthub-core-components (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence
docthub-core-components — npm security scan | PkgRadar