Find why this request-driven plugin loader has an unsafe module boundary.
JavaScript
export async function loadPlugin(request) {
const name = new URL(request.url).searchParams.get("plugin");
const plugin = await import(`./plugins/${name}.js`);
return plugin.default;
}