PkgRadar

npm · registry.npmjs.org

tocco-admin

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 3.15.87

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/ckeditor4/plugins/codemirror/js/beautify.min.js

Scanned versions

VersionVerdictScoreScanned (UTC)
3.15.1-playgroundLow risk02026-06-03
3.15.89Low risk02026-06-03
3.16.21Low risk02026-06-02
3.15.88Low risk02026-06-01
3.16.20Low risk02026-05-29
3.15.87Review32026-05-28
3.16.19Review32026-05-28
3.16.18Review482026-05-25
3.15.0-playgroundReview482026-05-25
3.15.86Review482026-05-25

Block this in CI

PkgRadar gates tocco-admin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]