npm · registry.npmjs.org

@fgv/ts-extras

Shell Credential File Read

Why PkgRadar flagged 5.1.0-37

Severity	Signal	Evidence
high	Shell Credential File Read	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`5.1.0-37`	High risk	13	2026-06-26
`5.0.2`	Low risk	0	2026-06-19
`5.1.0-36`	Low risk	0	2026-06-19
`5.1.0-35`	Low risk	0	2026-06-07
`5.1.0-34`	Low risk	0	2026-06-06
`5.1.0-33`	Low risk	0	2026-05-30
`5.1.0-32`	Low risk	0	2026-05-27
`5.1.0-31`	Low risk	0	2026-05-26
`5.1.0-29`	Low risk	0	2026-05-24
`5.1.0-30`	Low risk	0	2026-05-24

Block this in CI

PkgRadar gates @fgv/ts-extras (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @fgv/[email protected]