PkgRadar

npm · registry.npmjs.org

iteragain

Remote Dependency Spec: devDependencies.js-utils="https://github.com/danieloakman/js-utils/releases/download/v0.16.2/package.tgz"

Why PkgRadar flagged 4.1.6

SeveritySignalEvidence
highRemote Dependency SpecdevDependencies.js-utils="https://github.com/danieloakman/js-utils/releases/download/v0.16.2/package.tgz" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
4.2.1Low risk02026-05-31
4.1.6Review42026-05-30
4.2.0Low risk02026-05-30

Block this in CI

PkgRadar gates iteragain (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
iteragain — npm security scan | PkgRadar