Quick Setup made organization code import the plug-in loader, which loads packages/plugins/<kind>/<name>/index.mjs by a computed path. The scanner now allows exactly that form in the loader file and still refuses it anywhere else.