npm · registry.npmjs.org

@askthew/mcp-plugin

Credential file access: matched "id_rsa"

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.4.30`	Review	5	2026-05-29
`0.4.27`	Low risk	0	2026-05-26
`0.4.29`	Low risk	0	2026-05-26

Block this in CI

PkgRadar gates @askthew/mcp-plugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @askthew/[email protected]