npm · registry.npmjs.org
@adbayb/stack
Credential file access: matched "GITHUB_TOKEN"
Why PkgRadar flagged 2.36.1-next-d738fcb
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched "GITHUB_TOKEN" · package/templates/multi-projects/.github/workflows/continuous_delivery.yml |
| high | Credential file access | matched "GITHUB_TOKEN" · package/templates/single-project/.github/workflows/continuous_delivery.yml |
| high | Credential file access | matched "GITHUB_TOKEN" · package/templates/multi-projects/.github/workflows/conventional_commit.yml |
| high | Credential file access | matched "GITHUB_TOKEN" · package/templates/single-project/.github/workflows/conventional_commit.yml |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.38.0 | Low risk | 0 | 2026-06-15 |
2.37.0-next-7d1c5c9 | Low risk | 0 | 2026-06-15 |
2.36.1-next-2d037ee | Low risk | 0 | 2026-06-15 |
2.36.1-next-185924d | Low risk | 0 | 2026-05-29 |
2.37.0 | Low risk | 0 | 2026-05-29 |
2.36.1-next-d738fcb | Review | 50 | 2026-05-24 |
2.36.1 | Review | 50 | 2026-05-24 |
2.36.0-next-fa6b2f1 | Review | 50 | 2026-05-24 |
2.36.0 | Review | 50 | 2026-05-24 |
2.36.0-next-d491b30 | Review | 50 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @adbayb/[email protected]