PkgRadar

npm · registry.npmjs.org

winter-super-cli

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 2026.6.28

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/resources/local/page-agent/package-lock.json
mediumObfuscation Densityhigh encoded/escaped-token density · package/resources/local/agents.md/pnpm-lock.yaml

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.29Low risk02026-05-29
2026.6.28Review162026-05-28
2026.6.27Review162026-05-28
2026.6.24Review822026-05-25
2026.6.26Review822026-05-25
2026.6.23Review1242026-05-25

Block this in CI

PkgRadar gates winter-super-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]