npm · registry.npmjs.org

@biang/ai-terminal

Credential file access: matched ".ssh"

Why PkgRadar flagged 0.1.41

Severity	Signal	Evidence
medium	Credential file access	matched ".ssh" · package/server/index.js
medium	Credential file access	matched ".ssh" · package/server/pairing.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.1.41`	Review	17	2026-05-27
`0.1.42`	Review	17	2026-05-27
`0.1.40`	Review	17	2026-05-26
`0.1.39`	Review	17	2026-05-25
`0.1.37`	Review	25	2026-05-25
`0.1.38`	Review	25	2026-05-25

Block this in CI

PkgRadar gates @biang/ai-terminal (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @biang/[email protected]