high

Dependencies mismatch

  • metadata

This package has inconsistent dependencies in the tarball's package.json

high

Prerelease version

  • metadata

The domain of the maintainer's email address ([email protected]) was re-registered after the latest release (4.2.0) of this package. It could be that an attacker leveraged the domain by re-registering it to compromise the maintainer's NPM account