PkgRadar

npm · registry.npmjs.org

@saltcorn/plugins-loader

Credential file access: matched ".ssh"

Scanned versions

VersionVerdictScoreScanned (UTC)
1.5.7Low risk02026-06-11
1.6.0-rc.1Low risk02026-06-08
1.6.0-beta.14Low risk02026-06-04
1.6.0-beta.13Low risk02026-06-01
1.6.0-beta.11Review22026-05-27
1.6.0-beta.12Review22026-05-27

Block this in CI

PkgRadar gates @saltcorn/plugins-loader (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @saltcorn/[email protected]
@saltcorn/plugins-loader — npm security scan | PkgRadar