npm · registry.npmjs.org
@deppon/create-deppon-app
Credential File Packaged: package/template/.env
Why PkgRadar flagged 2.5.8
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential File Packaged | package/template/.env · package/template/.env |
| medium | Credential file access | matched ".npmrc" · package/deppon.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.5.8 | High risk | 50 | 2026-06-10 |
2.5.9 | High risk | 50 | 2026-06-10 |
2.5.12 | High risk | 50 | 2026-06-10 |
2.5.11 | High risk | 50 | 2026-06-10 |
2.5.10 | High risk | 50 | 2026-06-10 |
2.5.7 | High risk | 50 | 2026-06-10 |
2.5.6 | High risk | 50 | 2026-06-10 |
Related campaigns
- credential_file_packaged:package/template/.env — 78 releases, max score 50
Block this in CI
pkgradar gate --ecosystem npm @deppon/[email protected]