PkgRadar

npm · registry.npmjs.org

@metamask/snaps-execution-environments

Known Indicator Filename: package/dist/webpack/iframe/bundle.js

Why PkgRadar flagged 11.1.0

SeveritySignalEvidence
highKnown Indicator Filenamepackage/dist/webpack/iframe/bundle.js · package/dist/webpack/iframe/bundle.js
highKnown Indicator Filenamepackage/dist/webpack/node-process/bundle.js · package/dist/webpack/node-process/bundle.js
highKnown Indicator Filenamepackage/dist/webpack/node-thread/bundle.js · package/dist/webpack/node-thread/bundle.js

Scanned versions

VersionVerdictScoreScanned (UTC)
11.0.1Low risk02026-06-10
11.0.2Low risk02026-06-10
11.1.0Review302026-05-28
11.1.1Review302026-05-28

Block this in CI

PkgRadar gates @metamask/snaps-execution-environments (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @metamask/[email protected]
Start free — 25 scans / moView full evidence