PkgRadar

Go modules · proxy.golang.org

github.com/metalagman/omnidist

Credential file access: matched ".NPMRC"

Why PkgRadar flagged v0.1.30

SeveritySignalEvidence
mediumCredential file accessmatched ".NPMRC" · github.com/metalagman/[email protected]/internal/workflow/npm/workflow.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.30Review152026-06-06
v0.1.29Review152026-06-02
v0.1.29-0.20260601102410-0da90f1be84bReview152026-06-02
v0.1.28Review152026-06-02
v0.1.27Review152026-06-02
v0.1.26Review152026-06-02

Block this in CI

PkgRadar gates github.com/metalagman/omnidist (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/metalagman/[email protected]
Start free — 25 scans / moView full evidence