PkgRadar

npm · registry.npmjs.org

mastra

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.0.0-channels-on-lease-20260612211814

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/chunk-M5QYRDZZ.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-channels-on-lease-20260612211814Review32026-06-12
1.13.0Review32026-06-12
1.13.0-alpha.4Review32026-06-12
1.12.3-alpha.3Review32026-06-11
0.0.0-channels-on-lease-20260611222452Review32026-06-11
1.12.3-alpha.2Review32026-06-06
1.12.3-alpha.1Review32026-06-06
1.12.3-alpha.0Review32026-06-06
0.0.0-channels-output-processor-20260605211340Review32026-06-05
0.0.0-channels-output-processor-20260605192833Review32026-06-05
0.0.0-signals-pubsub-reserve-20260605182857Review32026-06-05
0.0.0-channels-owner-stream-20260605033931Review32026-06-05
0.0.0-channels-owner-stream-20260605010922Review32026-06-05
0.0.0-channels-owner-stream-20260605004943Review32026-06-05
0.0.0-channels-owner-stream-20260604235257Review32026-06-05
0.0.0-channels-owner-stream-20260604231429Review32026-06-04
1.12.2Review32026-06-04
1.12.2-alpha.1Review32026-06-04
1.12.2-alpha.0Review32026-06-04
0.0.0-yj-ab-demo-20260604080218Review32026-06-04
0.0.0-wardpeet-auth-rework-20260604074715Review32026-06-04
0.0.0-yj-ab-demo-20260604061738Review32026-06-04
0.0.0-yj-ab-demo-20260604051858Review32026-06-04
1.12.1Review32026-06-04
1.12.1-alpha.0Review32026-06-03
0.0.0-yj-ab-demo-20260603185651Review32026-06-03
1.12.0Review32026-06-03
0.0.0-declined-tool-result-fix-20260602220958Review32026-06-02
0.0.0-graph-v4-fix-20260602222101Review32026-06-02
1.11.0-alpha.9Review32026-06-02
1.11.0-alpha.8Review32026-06-02
0.0.0-deploy-alex-2-20260602122535Review32026-06-02
1.11.0-alpha.6Review32026-06-02
1.11.0-alpha.5Review32026-06-01
1.10.3-alpha.4Review52026-06-01
1.10.3-alpha.3Review52026-05-31
0.0.0-fix-create-observability-org-selection-20260529112852Review52026-05-29
0.0.0-feat-playground-ui-input-button-groups-20260529070627Review52026-05-29
0.0.0-graph-crash-v3-20260528202217Review52026-05-28
1.10.3-alpha.2Review152026-05-28
1.10.3-alpha.1Review152026-05-28
0.0.0-fix-workflow-graph-part-2-20260527233847Review152026-05-28
0.0.0-fix-playground-ui-context-menu-z-index-20260527122415Review152026-05-27
1.10.2Review152026-05-27
1.10.1-alpha.10Review152026-05-27
1.10.1Review152026-05-27
1.10.1-alpha.4Review152026-05-25
1.10.1-alpha.5Review152026-05-25

Block this in CI

PkgRadar gates mastra (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]