PkgRadar

npm · registry.npmjs.org

@openhands/agent-canvas

Credential file access: matched "AWS_ACCESS_KEY"

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0-rc.11Review212026-06-12
1.0.0-rc.10Review212026-06-12
1.0.0-rc.9Review212026-06-11
1.0.0-rc.8Review212026-06-11
1.0.0-rc.7Review212026-06-11
1.0.0-rc.6Review212026-06-10
1.0.0-rc.5Review182026-06-06
1.0.0-rc.4Review182026-06-05
1.0.0-rc.3Review742026-06-05
1.0.0-rc.2Review182026-06-04
1.0.0-rc.1Review182026-06-04
1.0.0-beta.9Review182026-06-03
1.0.0-beta.8Review182026-06-03
1.0.0-beta.7Review182026-06-03
1.0.0-beta.6Review742026-06-03
1.0.0-alpha.9Review742026-06-03
1.0.0-alpha.8Review742026-06-03
1.0.0-beta.4Review182026-06-02
1.0.0-beta.5Review182026-06-02
1.0.0-beta.1Review182026-06-01
1.0.0-beta.2Review182026-06-01
1.0.0-alpha.10Review182026-06-01
1.0.0-alpha.5Review182026-05-30
1.0.0-alpha.7Review632026-05-27
1.0.0-alpha.6Review632026-05-27

Block this in CI

PkgRadar gates @openhands/agent-canvas (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @openhands/[email protected]
Start free — 25 scans / moView full evidence