npm · registry.npmjs.org
@keshavsoft-org/express-todo
Credential File Packaged: package/bin/v6/commands/simple/template/v1/.env
Why PkgRadar flagged 1.7.6
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential File Packaged | package/bin/v6/commands/simple/template/v1/.env · package/bin/v6/commands/simple/template/v1/.env |
| high | Credential File Packaged | package/bin/v6/commands/simple/template/v2/.env · package/bin/v6/commands/simple/template/v2/.env |
| high | Credential File Packaged | package/bin/v6/commands/simple/template/v3/.env · package/bin/v6/commands/simple/template/v3/.env |
| high | Credential File Packaged | package/bin/v6/commands/simple/template/v4/.env · package/bin/v6/commands/simple/template/v4/.env |
| high | Credential File Packaged | package/bin/v6/commands/simpleWithCrud/template/v3/.env · package/bin/v6/commands/simpleWithCrud/template/v3/.env |
| high | Credential File Packaged | package/bin/v6/commands/simpleWithUi/template/v1/.env · package/bin/v6/commands/simpleWithUi/template/v1/.env |
| high | Credential File Packaged | package/bin/v6/commands/simpleWithUi/template/v2/.env · package/bin/v6/commands/simpleWithUi/template/v2/.env |
| high | Credential File Packaged | package/bin/v7/commands/simple/template/v4/.env · package/bin/v7/commands/simple/template/v4/.env |
| high | Credential File Packaged | package/bin/v7/commands/simple/template/v5/.env · package/bin/v7/commands/simple/template/v5/.env |
| high | Credential File Packaged | package/bin/v7/commands/simple/template/v6/.env · package/bin/v7/commands/simple/template/v6/.env |
| high | Credential File Packaged | package/bin/v7/commands/simpleWithCrud/template/v3/.env · package/bin/v7/commands/simpleWithCrud/template/v3/.env |
| high | Credential File Packaged | package/bin/v7/commands/simpleWithUi/template/v2/.env · package/bin/v7/commands/simpleWithUi/template/v2/.env |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.7.6 | High risk | 100 | 2026-06-11 |
1.9.1 | High risk | 100 | 2026-06-11 |
1.7.7 | High risk | 100 | 2026-06-10 |
1.7.8 | High risk | 100 | 2026-06-10 |
Block this in CI
pkgradar gate --ecosystem npm @keshavsoft-org/[email protected]