PkgRadar

npm · registry.npmjs.org

@vectorize-io/hindsight-control-plane

Remote Payload: matched "github.com/FiloSottile/mkcert/releases/download"

Why PkgRadar flagged 0.8.2

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/FiloSottile/mkcert/releases/download" · package/standalone/node_modules/next/dist/lib/mkcert.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.8.2Review122026-06-12
0.8.1Review82026-06-09
0.8.0Review82026-06-08
0.7.2Review122026-06-02
0.7.1Review742026-05-28
0.6.2Review242026-05-27
0.7.0Review242026-05-27

Block this in CI

PkgRadar gates @vectorize-io/hindsight-control-plane (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vectorize-io/[email protected]