PkgRadar

npm · registry.npmjs.org

@mastra/deployer

Credential file access: matched ".npmrc"

Why PkgRadar flagged 0.0.0-channels-on-lease-20260612211814

SeveritySignalEvidence
mediumCredential file accessmatched ".npmrc" · package/dist/chunk-WE66TECO.cjs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-channels-on-lease-20260612211814Review42026-06-12
1.42.0-alpha.4Review42026-06-12
1.42.0Review42026-06-12
1.11.0Review42026-06-11
1.12.0-alpha.0Review42026-06-11
1.11.0-alpha.2Review42026-06-11
0.0.0-channels-on-lease-20260611222452Review42026-06-11
1.42.0-alpha.3Review42026-06-08
1.42.0-alpha.2Review42026-06-06
1.42.0-alpha.1Review42026-06-06
1.42.0-alpha.0Review42026-06-06
0.0.0-channels-output-processor-20260605211340Review42026-06-05
0.0.0-channels-output-processor-20260605192833Review42026-06-05
0.0.0-signals-pubsub-reserve-20260605182857Review42026-06-05
0.0.0-channels-owner-stream-20260605033931Review42026-06-05
0.0.0-channels-owner-stream-20260605010922Review42026-06-05
0.0.0-channels-owner-stream-20260605004943Review42026-06-05
0.0.0-channels-owner-stream-20260604235257Review42026-06-05
0.0.0-channels-owner-stream-20260604231429Review42026-06-04
1.41.0Review42026-06-04
1.41.0-alpha.0Review42026-06-04
0.0.0-yj-ab-demo-20260604080218Review42026-06-04
0.0.0-wardpeet-auth-rework-20260604074715Review42026-06-04
0.0.0-yj-ab-demo-20260604061738Review42026-06-04
0.0.0-yj-ab-demo-20260604051858Review42026-06-04
1.40.0Review42026-06-03
1.40.0-alpha.0Review42026-06-03
0.0.0-yj-ab-demo-20260603185651Review42026-06-03
1.39.0Review42026-06-03
0.0.0-declined-tool-result-fix-20260602220958Review42026-06-02
1.38.0Review42026-06-02
1.38.0-alpha.9Review42026-06-02
1.38.0-alpha.8Review42026-06-02
0.0.0-deploy-alex-2-20260602122535Review42026-06-02
1.38.0-alpha.6Review42026-06-02
1.38.0-alpha.5Review42026-06-01
1.38.0-alpha.4Review42026-06-01
1.38.0-alpha.3Review42026-05-31
0.0.0-fix-create-observability-org-selection-20260529112852Review42026-05-29
0.0.0-feat-playground-ui-input-button-groups-20260529070627Review42026-05-29
0.0.0-graph-crash-v3-20260528202217Review42026-05-28
1.38.0-alpha.2Review112026-05-28
1.37.2-alpha.1Review112026-05-28
0.0.0-fix-workflow-graph-part-2-20260527233847Review112026-05-28
0.0.0-fix-playground-ui-context-menu-z-index-20260527122415Review112026-05-27
1.37.1Review112026-05-27
1.37.0-alpha.9Review112026-05-27
1.37.0Review112026-05-27
1.37.0-alpha.4Review42026-05-25
1.37.0-alpha.5Review42026-05-25

Block this in CI

PkgRadar gates @mastra/deployer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mastra/[email protected]