PkgRadar

npm · registry.npmjs.org

@pulumi/scm

Credential file access: matched ".ssh"

Scanned versions

VersionVerdictScoreScanned (UTC)
1.2.0-alpha.1781077420Low risk02026-06-10
1.2.0-alpha.1780990495Low risk02026-06-09
1.2.0-alpha.1780907735Low risk02026-06-08
1.2.0-alpha.1780904604Low risk02026-06-08
1.2.0-alpha.1780817821Low risk02026-06-07
1.2.0-alpha.1780730433Low risk02026-06-06
1.2.0-alpha.1780645370Low risk02026-06-05
1.2.0-alpha.1780558861Low risk02026-06-04
1.2.0-alpha.1780472470Low risk02026-06-03
1.2.0-alpha.1780294483Low risk02026-06-01
1.2.0-alpha.1780124938Low risk02026-05-30
1.1.1-alpha.1780030011Low risk02026-05-29
1.1.1Low risk02026-05-29
1.2.0-alpha.1780007673Low risk02026-05-29
1.2.0-alpha.1779953935Low risk02026-05-28
1.2.0-alpha.1779867363Low risk02026-05-27
1.2.0-alpha.1779780385Low risk02026-05-26
1.2.0-alpha.1779694544Review52026-05-25
1.2.0-alpha.1779607023Review302026-05-24
1.1.0Review302026-05-24

Block this in CI

PkgRadar gates @pulumi/scm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @pulumi/[email protected]
Start free — 25 scans / moView full evidence