PkgRadar

npm · registry.npmjs.org

@eclipse-glsp/cli

Remote Payload: matched "wget "

Why PkgRadar flagged 2.8.0-next.3

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · package/dist/cli.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.8.0-next.3Review32026-06-10
2.7.0Review32026-06-01
2.8.0-next.0Review32026-06-01
2.7.0-next.24Review32026-05-29
2.7.0-next.23Review32026-05-28
2.7.0-next.22Review32026-05-28
2.7.0-next.20Review32026-05-27
2.7.0-next.21Review32026-05-27

Block this in CI

PkgRadar gates @eclipse-glsp/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @eclipse-glsp/[email protected]