npm · registry.npmjs.org

json-joy

Remote Dependency Spec: devDependencies.editing-traces="https://github.com/streamich/editing-traces#71c6d732956dbe08a490f8cd9764214bd3d4c9b7"

Why PkgRadar flagged 18.24.0

Severity	Signal	Evidence
high	Remote Dependency Spec	devDependencies.editing-traces="https://github.com/streamich/editing-traces#71c6d732956dbe08a490f8cd9764214bd3d4c9b7" · package.json
high	Remote Dependency Spec	devDependencies.json-crdt-traces="https://github.com/streamich/json-crdt-traces#ec825401dc05cbb74b9e0b3c4d6527399f54d54d" · package.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`18.24.0`	Review	4	2026-06-02
`18.28.0`	Review	4	2026-06-02

Block this in CI

PkgRadar gates json-joy (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]