PkgRadar

npm · registry.npmjs.org

@crawlee/templates

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 4.0.0-beta.66

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
3.17.1-beta.3Low risk02026-06-12
4.0.0-beta.66Review32026-06-10
4.0.0-beta.65Review32026-06-09
4.0.0-beta.64Review32026-06-08
3.17.1-beta.2Low risk02026-06-06
4.0.0-beta.63Review32026-06-05
3.17.1-beta.1Low risk02026-06-05
3.17.1-beta.0Low risk02026-06-05
4.0.0-beta.62Review32026-06-04
3.16.1-beta.79Low risk02026-06-04
3.17.0Low risk02026-06-04
3.16.1-beta.78Low risk02026-06-02
3.16.1-beta.77Low risk02026-06-02
4.0.0-beta.61Review32026-06-01
4.0.0-beta.60Review32026-06-01
3.16.1-beta.76Low risk02026-05-29
3.16.1-beta.75Low risk02026-05-29
3.16.1-beta.74Low risk02026-05-29
3.16.1-beta.73Low risk02026-05-29
3.16.1-beta.72Low risk02026-05-29
3.16.1-beta.71Low risk02026-05-29
3.16.1-beta.70Low risk02026-05-28
3.16.1-beta.69Low risk02026-05-27
3.16.1-beta.68Low risk02026-05-26
3.16.1-beta.67Low risk02026-05-26
3.16.1-beta.66Low risk02026-05-26
3.16.1-beta.65Low risk02026-05-25
4.0.0-beta.59Low risk02026-05-25

Block this in CI

PkgRadar gates @crawlee/templates (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @crawlee/[email protected]