PkgRadar

npm · registry.npmjs.org

@nshiab/simple-data-analysis

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Why PkgRadar flagged 5.20.7

SeveritySignalEvidence
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · package/esm/deps/jsr.io/@nshiab/journalism-google/1.0.10/src/google/helpers/logToSheet.js

Scanned versions

VersionVerdictScoreScanned (UTC)
5.20.7Review42026-06-11
5.20.6Review42026-06-08
5.20.4Review42026-05-29
5.20.3Review42026-05-29
5.20.1Review42026-05-28
5.20.2Review42026-05-28
5.20.0Review42026-05-28
5.19.18Review42026-05-26
5.19.19Review42026-05-26

Block this in CI

PkgRadar gates @nshiab/simple-data-analysis (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @nshiab/[email protected]