{"version":"2.1.248","anchor":"npm-package-names-are-checked-for-path-traversal","canonical_anchor":"npm-package-names-are-checked-for-path-traversal","heading":"npm package names are checked for path traversal","tier":"internal","area":"Plugins","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248\/e\/npm-package-names-are-checked-for-path-traversal","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248","markdown":"### npm package names are checked for path traversal\n\nnpm package names are now rejected if they contain path traversal characters.\n\n**What**\n\nPackage names are now validated against a schema that rejects anything containing `..` or `\/\/` and requires a valid scoped or unscoped npm name shape.\n\n**Details**\n\n- The rejection message is \"Package name cannot contain path traversal patterns\".\n\n**Evidence**\n\n`Package name cannot contain path traversal patterns`\n\n- Area: Plugins\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 1\/5"}