npm · registry.npmjs.org

@instructure/canvas-rce-old

Remote Dependency Spec: dependencies.scroll-into-view="https://github.com/bkirkby/scroll-into-view.git#588b0ced98eeecf84e6fb2074aa076e80b7cffab"

Why PkgRadar flagged 4.1.2

Severity	Signal	Evidence
high	Remote Dependency Spec	dependencies.scroll-into-view="https://github.com/bkirkby/scroll-into-view.git#588b0ced98eeecf84e6fb2074aa076e80b7cffab" · package.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`4.1.2`	High risk	12	2026-06-10
`4.1.3`	High risk	12	2026-06-10
`4.1.4`	Review	12	2026-05-29
`4.1.5`	Review	12	2026-05-29

Block this in CI

PkgRadar gates @instructure/canvas-rce-old (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @instructure/[email protected]