PkgRadar

npm · registry.npmjs.org

@opensip-tools/checks-universal

Credential file access: matched ".npmrc"

Why PkgRadar flagged 2.13.0

SeveritySignalEvidence
mediumCredential file accessmatched ".npmrc" · package/dist/checks/security/package-supply-chain-policy.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.13.0Review32026-06-08
2.12.0Review32026-06-08
2.11.0Review32026-06-08
2.8.0Review32026-06-07
2.10.0Review32026-06-07
2.7.1Review32026-06-07
2.7.0Review32026-06-07
2.6.2Low risk02026-06-04
2.6.1Low risk02026-06-03
2.6.0Low risk02026-06-03
2.5.2Low risk02026-06-02
2.5.1Low risk02026-06-02
2.4.1Low risk02026-06-01
2.4.0Low risk02026-06-01
2.3.3Low risk02026-06-01
2.3.2Low risk02026-06-01
2.3.1Low risk02026-06-01
2.3.0Low risk02026-06-01
2.1.0Low risk02026-05-31
2.0.1Low risk02026-05-29
1.3.1Low risk02026-05-29
2.0.0Low risk02026-05-29

Block this in CI

PkgRadar gates @opensip-tools/checks-universal (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @opensip-tools/[email protected]
Start free — 25 scans / moView full evidence