PkgRadar

npm · registry.npmjs.org

@poncho-ai/harness

Credential file access: matched "AWS_ACCESS_KEY"

Scanned versions

VersionVerdictScoreScanned (UTC)
0.59.11Review72026-06-12
0.59.10Review72026-06-12
0.59.9Review102026-06-12
0.59.8Review72026-06-12
0.59.7Review102026-06-12
0.59.6Review72026-06-12
0.59.5Review102026-06-12
0.59.4Review102026-06-12
0.59.3Review72026-06-12
0.59.2Review72026-06-11
0.59.1Review72026-06-11
0.59.0Review102026-06-11
0.58.0Review102026-06-11
0.55.0Review102026-06-11
0.57.0Review102026-06-11
0.53.0Review102026-06-11
0.52.2Review102026-06-11
0.36.0Review102026-06-11
0.52.1Review102026-06-09
0.51.0Review102026-06-09
0.51.1Review102026-06-04
0.52.0Review102026-06-04
0.50.5Review102026-06-03
0.50.4Review102026-06-02
0.50.3Review102026-06-01
0.50.2Review102026-05-31
0.50.1Review102026-05-28
0.50.0Review102026-05-28
0.48.0Review102026-05-27
0.49.0Review102026-05-27

Block this in CI

PkgRadar gates @poncho-ai/harness (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @poncho-ai/[email protected]