PkgRadar

npm · registry.npmjs.org

@percepta/create

Credential file access: matched ".npmrc"

Why PkgRadar flagged 4.2.0

SeveritySignalEvidence
mediumCredential file accessmatched ".npmrc" · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
4.2.0Review32026-06-16
4.1.16Review32026-06-09
4.1.15Review32026-06-09
4.1.14Review32026-06-09
4.1.13Review32026-06-08
4.1.12Review32026-06-08
4.1.11Review32026-06-08
4.1.10Review32026-06-08
4.1.9Review32026-06-06
4.1.8Review32026-06-04
4.1.7Review32026-06-04
4.1.6Review32026-06-04
4.1.5Review32026-06-04
4.1.4Review32026-06-03
4.1.3Review32026-06-03
4.1.2Review32026-06-03
4.1.1Review32026-06-03
4.1.0Review32026-06-02
4.0.0Review32026-06-02
4.0.1Review32026-06-02
3.6.2Review32026-06-02
3.6.3Review32026-06-02

Block this in CI

PkgRadar gates @percepta/create (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @percepta/[email protected]