PkgRadar

npm · registry.npmjs.org

@1claw/cli

Remote Payload

Why PkgRadar flagged 0.35.0

SeveritySignalEvidence
mediumRemote Payloadpackage/dist/src/docker/base/healthcheck.sh

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
0.35.0Review82026-06-25
0.34.7Low risk02026-06-22
0.34.6Low risk02026-06-22
0.34.5Low risk02026-06-22
0.34.4Low risk02026-06-22
0.34.2Low risk02026-06-22
0.34.1Low risk02026-06-22
0.34.0Low risk02026-06-22
0.32.2Low risk02026-06-09
0.32.1Low risk02026-06-05
0.32.0Low risk02026-06-05
0.31.0Low risk02026-06-01
0.30.0Low risk02026-06-01
0.29.1Low risk02026-06-01
0.29.0Low risk02026-05-30
0.27.0Low risk02026-05-29
0.28.0Low risk02026-05-29

Block this in CI

PkgRadar gates @1claw/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @1claw/[email protected]
Start free — 25 scans / moView full evidence