npm · registry.npmjs.org
@dhis2/cli-app-scripts
Credential File Packaged: package/assets/shell/.env
Why PkgRadar flagged 3.1.0-beta.1
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential File Packaged | package/assets/shell/.env · package/assets/shell/.env |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.1.0-beta.1 | Review | 10 | 2026-06-11 |
3.1.0-beta.2 | Review | 10 | 2026-06-11 |
12.11.0-beta.2 | Low risk | 0 | 2026-06-11 |
12.11.0 | Low risk | 0 | 2026-06-11 |
3.1.0-beta.0 | Review | 10 | 2026-06-11 |
12.11.2 | Low risk | 0 | 2026-06-11 |
12.11.1 | Low risk | 0 | 2026-06-11 |
Block this in CI
pkgradar gate --ecosystem npm @dhis2/[email protected]