PkgRadar

npm · registry.npmjs.org

@pulumi/github

Credential file access: matched "GITHUB_TOKEN"

Scanned versions

VersionVerdictScoreScanned (UTC)
6.15.0-alpha.1781636864Low risk02026-06-16
6.15.0-alpha.1781594771Low risk02026-06-16
6.15.0-alpha.1781421090Low risk02026-06-14
6.15.0-alpha.1781075391Low risk02026-06-10
6.15.0-alpha.1780988493Low risk02026-06-09
6.15.0-alpha.1780907173Low risk02026-06-08
6.15.0-alpha.1780902518Low risk02026-06-08
6.15.0-alpha.1780815961Low risk02026-06-07
6.15.0-alpha.1780728532Low risk02026-06-06
6.15.0-alpha.1780643283Low risk02026-06-05
6.15.0-alpha.1780556962Low risk02026-06-04
6.15.0-alpha.1780470669Low risk02026-06-03
6.15.0-alpha.1780123182Low risk02026-05-30
6.15.0-alpha.1780006976Review32026-05-29
6.15.0-alpha.1779951771Review32026-05-28
6.15.0-alpha.1779865479Review32026-05-27
6.15.0-alpha.1779778496Review32026-05-26
6.15.0-alpha.1779692692Review152026-05-25
6.14.0Review1002026-05-24
6.15.0-alpha.1779605336Review1002026-05-24

Block this in CI

PkgRadar gates @pulumi/github (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @pulumi/[email protected]
Start free — 25 scans / moView full evidence