PkgRadar

npm · registry.npmjs.org

workspace-architect

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 2.2.116

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/bin/cli-functions.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.2.116Review32026-06-15
2.2.115Review32026-06-15
2.2.114Review32026-06-12
1.3.0Low risk02026-06-10
1.4.1Low risk02026-06-10
2.2.113Review32026-06-10
2.2.112Review32026-06-09
2.2.111Review32026-06-09
2.2.110Review32026-06-09
2.2.109Review32026-06-07
2.2.108Review32026-05-29
2.2.107Review32026-05-28
2.2.106Review32026-05-28
2.2.105Review32026-05-27
2.2.103Review122026-05-25
2.2.104Review122026-05-25

Block this in CI

PkgRadar gates workspace-architect (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence