npm · registry.npmjs.org
@gravity-platform/aws-toolkit
Credential file access: matched ".aws"
Why PkgRadar flagged 1.1.4
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched ".aws" · package/dist/AmazonTextract/node/executor.js |
| high | Credential file access | matched ".aws" · package/dist/Transcribe/node/executor.js |
| high | Credential file access | matched ".AWS" · package/dist/credentials/index.js |
| high | Credential file access | matched ".aws" · package/dist/AmazonTextract/service/processTextract.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.1.3 | Low risk | 0 | 2026-06-12 |
1.1.6 | Low risk | 0 | 2026-06-12 |
1.1.4 | Review | 80 | 2026-05-24 |
1.1.5 | Review | 80 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @gravity-platform/[email protected]