我正在开发一个npm包（phpstan-watcher）。
Socket.dev给了我两个警告：
1.

Manifest confusion  
SUPPLY CHAIN RISK  
This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

字符串

Unpublished package  
SUPPLY CHAIN RISK  
Package version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.

型
我不知道该怎么解决。
我在哪里可以找到更多关于我的包裹有什么问题的信息？
这两个警告怎么解决？
https://socket.dev/npm/package/phpstan-watcher