PkgRadar

npm · registry.npmjs.org

@desplega.ai/agent-swarm

Remote Payload: matched "api.github.com/graphql"

Why PkgRadar flagged 1.98.0

SeveritySignalEvidence
mediumRemote Payloadmatched "api.github.com/graphql" · package/src/github/reactions.ts
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/src/tools/skills/skill-install-remote.ts
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/src/tools/skills/skill-sync-remote.ts
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/src/http/skills.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
1.98.0Review532026-06-12
1.97.0Review372026-06-12
1.96.0Review372026-06-12
1.95.0Review532026-06-11
1.94.0Review402026-06-11
1.93.0Review402026-06-10
1.92.2Review402026-06-09
1.92.1Review402026-06-09
1.92.0Review402026-06-05
1.91.0Review402026-06-04
1.90.0Review402026-06-03
1.89.0Review402026-06-02
1.88.0Review402026-06-01
1.87.0Review402026-05-29
1.86.0Review542026-05-29
1.85.0Review542026-05-28
1.84.1Review542026-05-27
1.83.2Review542026-05-27
1.84.0Review542026-05-27
1.83.0Review542026-05-25
1.83.1Review542026-05-25

Block this in CI

PkgRadar gates @desplega.ai/agent-swarm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @desplega.ai/[email protected]