npm · registry.npmjs.org

@hortiview/generator-hortiview

Credential File Packaged: package/generators/app/templates/connector/.env

Why PkgRadar flagged 2.0.21552

Severity	Signal	Evidence
high	Credential File Packaged	package/generators/app/templates/connector/.env · package/generators/app/templates/connector/.env
high	Credential File Packaged	package/generators/app/templates/solution/.env · package/generators/app/templates/solution/.env

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.0.21552`	High risk	35	2026-06-10
`2.0.22380`	High risk	35	2026-06-10

Block this in CI

PkgRadar gates @hortiview/generator-hortiview (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @hortiview/[email protected]