npm · registry.npmjs.org
@ossjs/release
Credential file access: matched "GITHUB_TOKEN"
Why PkgRadar flagged 0.10.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched "GITHUB_TOKEN" · package/bin/build/utils/github/create-comment.js |
| high | Credential file access | matched "GITHUB_TOKEN" · package/bin/build/utils/github/create-github-release.js |
| high | Credential file access | matched "GITHUB_TOKEN" · package/bin/build/utils/github/get-commit-authors.js |
| high | Credential file access | matched "GITHUB_TOKEN" · package/bin/build/utils/github/get-github-release.js |
| high | Credential file access | matched "GITHUB_TOKEN" · package/bin/build/utils/release-notes/get-release-refs.js |
| high | Credential file access | matched "GITHUB_TOKEN" · package/bin/build/commands/show.js |
| high | Credential file access | matched "GITHUB_TOKEN" · package/src/utils/github/create-comment.ts |
| high | Credential file access | matched "GITHUB_TOKEN" · package/src/utils/github/create-github-release.ts |
| high | Credential file access | matched "GITHUB_TOKEN" · package/src/utils/github/get-commit-authors.ts |
| high | Credential file access | matched "GITHUB_TOKEN" · package/src/utils/github/get-github-release.ts |
| high | Credential file access | matched "GITHUB_TOKEN" · package/src/utils/release-notes/get-release-refs.ts |
| high | Credential file access | matched "GITHUB_TOKEN" · package/src/commands/show.ts |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.10.0 | Review | 37 | 2026-06-10 |
0.10.1 | Review | 22 | 2026-06-10 |
0.11.0 | Review | 22 | 2026-06-10 |
0.9.0 | Review | 31 | 2026-06-10 |
Block this in CI
pkgradar gate --ecosystem npm @ossjs/[email protected]