Loading npm security reports…
Installing this package causes the package manager to resolve code from numerous unverified remote, git, and local dependency locations. The inspected package itself has no executable code or lifecycle hook.
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgThe manifest declares installable dependencies from arbitrary remote tarballs, including an HTTP source.
package.jsonView on unpkg · L5It also declares git, local-path, link, and portal dependency sources that can substitute code during dependency resolution.
package.jsonView on unpkg · L23The manifest declares installable dependencies from arbitrary remote tarballs, including an HTTP source.
package.jsonView on unpkg · L59Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkgPackage manifest dependency URL targets known collector infrastructure.
package.jsonView on unpkgThis report applies to external_deps_enjoyer@1.0.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgThe manifest declares installable dependencies from arbitrary remote tarballs, including an HTTP source.
package.jsonView on unpkg · L5It also declares git, local-path, link, and portal dependency sources that can substitute code during dependency resolution.
package.jsonView on unpkg · L23The manifest declares installable dependencies from arbitrary remote tarballs, including an HTTP source.
package.jsonView on unpkg · L59Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkgPackage manifest dependency URL targets known collector infrastructure.
package.jsonView on unpkg