PkgRadar

npm · registry.npmjs.org

gatsby-matrix-theme

Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.

Why PkgRadar flagged 53.19.1

SeveritySignalEvidence
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/storybook/public/vendors~main.7c47903ea43e951c3707.manager.bundle.js

Scanned versions

VersionVerdictScoreScanned (UTC)
53.19.1Review232026-06-10
53.19.0Review232026-06-10
53.18.7Review232026-06-08
53.18.6Review232026-06-02
53.18.5Review232026-06-01
53.18.4Review232026-05-29
53.18.3Review452026-05-28
53.18.1Review252026-05-26
53.18.2Review252026-05-26

Block this in CI

PkgRadar gates gatsby-matrix-theme (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence