PkgRadar

npm · registry.npmjs.org

@clipform/mcp-server

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 1.22.2

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/chunk-H3DV5X53.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.44.2Low risk02026-06-11
1.44.3Low risk02026-06-11
1.44.1Low risk02026-06-11
1.44.0Low risk02026-06-11
1.42.0Low risk02026-06-11
1.41.0Low risk02026-06-10
1.40.0Low risk02026-06-10
1.39.0Low risk02026-06-08
1.38.0Low risk02026-06-08
1.37.0Low risk02026-06-07
1.36.0Low risk02026-06-06
1.35.0Low risk02026-06-06
1.34.0Low risk02026-06-06
1.33.0Low risk02026-06-06
1.32.0Low risk02026-06-06
1.31.0Low risk02026-06-06
1.30.0Low risk02026-06-06
1.29.0Low risk02026-06-05
1.28.0Low risk02026-06-05
1.27.0Low risk02026-06-02
1.26.1Low risk02026-06-01
1.26.0Low risk02026-05-31
1.25.0Low risk02026-05-29
1.24.1Low risk02026-05-28
1.24.0Low risk02026-05-27
1.23.0Low risk02026-05-25
1.22.2Review122026-05-24
1.22.1Review122026-05-24

Block this in CI

PkgRadar gates @clipform/mcp-server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @clipform/[email protected]