Review, yank, deprecate and report

When a package is reviewed

Publishing is open, but some versions stay unlisted until a PGB reviewer approves them. That happens when the package:

• asks to contact outside services (network.outbound),
• asks to change project data (database.write),
• asks to send or share from PGB Business, or
• contains executable code.

Until it is approved, only you and your team can see it. On Manage this package, Review status says which versions are pending. If a reviewer does not approve a version, it is Not listed; publish a new version that addresses their concerns. Packages from PGB itself are approved automatically.

Yank a version

Yank a version if it has a serious problem.

1. Open Publish, choose Manage on your package.
2. Under Versions, choose Yank on the version.
3. Give a reason and choose Yank version.

Yanking stops new installs. Existing installs keep working. You cannot undo it, and the version number can never be used again.

Deprecate a package

Deprecation warns people without removing anything.

1. On Manage this package, open Deprecate.
2. Optionally type a message (up to 300 characters), such as "replaced by @acme/new-package".
3. Choose Mark as deprecated.

The package page then shows a Deprecated banner. It stays installable. Use Update deprecation or Remove deprecation later.

Report a package

Anyone signed in can report a package.

1. Open the package and choose Report this package.
2. Under What's the problem? choose: Harmful or malicious behaviour, Spam or misleading listing, Copyright or trademark, Does not work, Inappropriate content or Something else.
3. Add optional Details (up to 2,000 characters).
4. Choose Send report.

The PGB team looks at every report. You do not need to do anything else.

Good to know

• Labels such as Security Checked describe automated checks only. See Trust labels and portability.
• Prefer a new version over a yank when you only need to fix something small.
• Keep your listing summary accurate; misleading listings can be reported.