PkgRadar

npm · registry.npmjs.org

@actual-app/core

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 26.6.0-nightly.20260528

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/src/server/accounts/title/index.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
26.7.0-nightly.20260613Low risk02026-06-13
26.7.0-nightly.20260612Low risk02026-06-12
26.7.0-nightly.20260611Low risk02026-06-11
26.7.0-nightly.20260610Low risk02026-06-10
26.7.0-nightly.20260609Low risk02026-06-09
26.7.0-nightly.20260608Low risk02026-06-08
26.7.0-nightly.20260607Low risk02026-06-07
26.7.0-nightly.20260605Low risk02026-06-06
26.7.0-nightly.20260606Low risk02026-06-06
26.7.0-nightly.20260604Low risk02026-06-04
26.7.0-nightly.20260603Low risk02026-06-03
26.7.0-nightly.20260602Low risk02026-06-02
26.6.0Low risk02026-06-01
26.6.0-nightly.20260601Low risk02026-06-01
26.6.0-nightly.20260531Low risk02026-05-31
26.6.0-nightly.20260530Low risk02026-05-30
26.6.0-nightly.20260529Low risk02026-05-29
26.6.0-nightly.20260528Review32026-05-28
26.6.0-nightly.20260527Review32026-05-27
26.6.0-nightly.20260526Review32026-05-26
26.6.0-nightly.20260525Low risk02026-05-25
26.6.0-nightly.20260524Low risk02026-05-25

Block this in CI

PkgRadar gates @actual-app/core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @actual-app/[email protected]
Start free — 25 scans / moView full evidence