PkgRadar

npm · registry.npmjs.org

@dazhicheng/common

Credential File Packaged: package/.env

Why PkgRadar flagged 1.0.19

SeveritySignalEvidence
highCredential File Packagedpackage/.env · package/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.19High risk352026-06-13
1.0.18High risk352026-06-13
1.0.16High risk352026-06-13
1.0.17High risk352026-06-13
1.0.15High risk352026-06-13
1.0.14High risk352026-06-13
1.0.13High risk352026-06-13
1.0.12High risk352026-06-13
1.0.11High risk352026-06-13
1.0.10High risk352026-06-10
1.0.9High risk242026-06-10
1.0.8High risk242026-06-10
1.0.7High risk352026-06-10
1.0.27High risk242026-06-10
1.0.26High risk242026-06-10
1.0.25High risk352026-06-10
1.0.24High risk242026-06-10
1.0.23High risk242026-06-10
1.0.22High risk242026-06-10
1.0.21High risk352026-06-10
1.0.20High risk242026-06-10
1.0.5High risk242026-06-10
1.0.4Low risk02026-05-25
1.0.3Low risk02026-05-25
1.0.2Low risk02026-05-25

Block this in CI

PkgRadar gates @dazhicheng/common (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @dazhicheng/[email protected]
Start free — 25 scans / moView full evidence