PkgRadar

npm · registry.npmjs.org

@open-turo/eslint-config-react

Remote Payload: matched "curl "

Why PkgRadar flagged 24.0.12

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/.github/workflows/ci.yaml

Scanned versions

VersionVerdictScoreScanned (UTC)
24.0.17Low risk02026-06-10
24.0.16Low risk02026-06-08
24.0.15Low risk02026-06-05
24.0.14Low risk02026-06-01
24.0.12Review122026-05-27
24.0.13Review122026-05-27

Block this in CI

PkgRadar gates @open-turo/eslint-config-react (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @open-turo/[email protected]
Start free — 25 scans / moView full evidence
@open-turo/eslint-config-react — npm security scan | PkgRadar