npm · registry.npmjs.org

@alexlit/lint-kit

Credential File Packaged: package/.npmrc

Why PkgRadar flagged 112.0.0

Severity	Signal	Evidence
high	Credential File Packaged	package/.npmrc · package/.npmrc

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`112.0.0`	Review	11	2026-06-10
`178.0.0`	Low risk	0	2026-06-10
`186.2.1`	Low risk	0	2026-06-10
`189.1.0`	Low risk	0	2026-06-10
`189.0.0`	Low risk	0	2026-06-08
`188.0.0`	Low risk	0	2026-05-29
`187.3.0`	Low risk	0	2026-05-28
`187.2.0`	Low risk	0	2026-05-27
`187.1.0`	Review	15	2026-05-25
`187.1.1`	Review	15	2026-05-25

Block this in CI

PkgRadar gates @alexlit/lint-kit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @alexlit/[email protected]