npm · registry.npmjs.org

geek-chat

Remote Dependency Spec: dependencies.react-komposer="https://github.com/bhavishhak/react-komposer.git"

Why PkgRadar flagged 0.1.5

Severity	Signal	Evidence
high	Remote Dependency Spec	dependencies.react-komposer="https://github.com/bhavishhak/react-komposer.git" · package.json
high	New Remote Dependency Vs Previous	dependencies.react-komposer added in 0.1.5 vs 0.1.4: "https://github.com/bhavishhak/react-komposer.git" · package.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.1.5`	High risk	24	2026-06-05
`0.1.6`	High risk	12	2026-06-05

Related campaigns

Block this in CI

PkgRadar gates geek-chat (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]