PkgRadar

npm · registry.npmjs.org

@metaharness/darwin

Credential file access: matched "id_rsa"

Why PkgRadar flagged 0.2.6

SeveritySignalEvidence
mediumSuspicious Publish Context{"package_age_days":2,"publisher":"ruvnet","burst_same_day":2,"burst_week":13,"lure":null,"version_anomaly":false,"new_account":false}

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.6Review152026-06-20
0.2.5Review152026-06-20
0.2.4Review152026-06-19
0.2.3Review152026-06-19
0.2.2Review152026-06-19
0.2.1Review152026-06-19
0.1.0Review152026-06-18
0.2.0Review152026-06-18

Block this in CI

PkgRadar gates @metaharness/darwin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @metaharness/[email protected]