npm · registry.npmjs.org
@pnpm/resolving.npm-resolver
Credential file access: matched ".npmrc"
Why PkgRadar flagged 1101.3.1
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched ".npmrc" · package/lib/index.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1101.5.2 | Low risk | 0 | 2026-06-11 |
1101.5.1 | Low risk | 0 | 2026-06-10 |
1101.5.0 | Low risk | 0 | 2026-06-05 |
1101.4.0 | Low risk | 0 | 2026-05-29 |
1101.3.3 | Low risk | 0 | 2026-05-27 |
1101.3.1 | Review | 30 | 2026-05-24 |
1101.3.2 | Review | 30 | 2026-05-24 |
Related campaigns
- pnpmuser — 12 releases, max score 53
Block this in CI
pkgradar gate --ecosystem npm @pnpm/[email protected]