PkgRadar

npm · registry.npmjs.org

@microsoft/app-manifest

Credential file access: matched ".azure"

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.7-alpha.cf95bb03a8.0Low risk02026-06-12
1.0.7-alpha.b932927c99.0Low risk02026-06-11
1.0.6Low risk02026-06-10
1.0.7-alpha.98f30c64cd.0Low risk02026-06-10
1.0.7-alpha.1673f8d0ac.0Low risk02026-06-09
1.0.7-alpha.36cd4ecbcb.0Low risk02026-06-08
1.0.7-alpha.928ccb1294.0Low risk02026-06-06
1.0.7-alpha.e253f6af8e.0Low risk02026-06-05
1.0.7-alpha.1ba1d62e58.0Low risk02026-06-04
1.0.7-alpha.b70dfa5c06.0Low risk02026-06-03
1.0.7-alpha.e7283713b5.0Low risk02026-06-02
1.0.7-alpha.eb0bad7c98.0Low risk02026-06-01
1.0.7-alpha.be8df62efa.0Low risk02026-05-30
1.0.7-alpha.8bc371c690.0Low risk02026-05-29
1.0.7-alpha.39b9226977.0Low risk02026-05-28
1.0.7-alpha.a7b5a6db3d.0Review12026-05-27
1.0.7-beta.2026052613.0Review12026-05-26
1.0.7-alpha.25a62e6335.0Review12026-05-25
1.0.7-alpha.45d3a95504.0Review422026-05-24
1.0.7-alpha.e01dbc1423.0Review422026-05-24

Block this in CI

PkgRadar gates @microsoft/app-manifest (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @microsoft/[email protected]
Start free — 25 scans / moView full evidence