npm · registry.npmjs.org
@dangojs/arco-design-pro-vue-demo
Credential File Packaged: package/template/.env
Why PkgRadar flagged 0.0.18
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential File Packaged | package/template/.env · package/template/.env |
| high | Credential File Packaged | package/template/.npmrc · package/template/.npmrc |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.0.18 | High risk | 35 | 2026-06-15 |
0.0.19 | High risk | 35 | 2026-06-15 |
0.0.20 | High risk | 35 | 2026-06-15 |
0.0.21 | High risk | 35 | 2026-06-15 |
Related campaigns
- credential_file_packaged:package/template/.env — 99 releases, max score 50
Block this in CI
pkgradar gate --ecosystem npm @dangojs/[email protected]