PkgRadar

npm · registry.npmjs.org

claude-code-templates

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 1.29.1

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/cli-tool/src/file-operations.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/cli-tool/src/sdk/global-agent-manager.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/cli-tool/src/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.29.1Review252026-06-13
1.28.14Review702026-06-13
1.28.15Review702026-06-13
1.28.16Review702026-06-13
1.29.0Review252026-06-13

Block this in CI

PkgRadar gates claude-code-templates (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]