npm · registry.npmjs.org

@devx-commerce/plugin-product-reviews

Credential file access: matched "aws_access_key"

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.2.0`	Low risk	0	2026-06-04
`4.0.1-beta.7`	Review	7	2026-06-04

Block this in CI

PkgRadar gates @devx-commerce/plugin-product-reviews (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @devx-commerce/[email protected]