npm · registry.npmjs.org

@quiltdata/benchling-webhook

Credential file access: matched ".npmrc"

Why PkgRadar flagged 0.18.0

Severity	Signal	Evidence
medium	Credential file access	matched ".npmrc" · package/dist/bin/commands/publish.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.18.0`	Review	3	2026-06-15
`0.17.1-20260415T202609Z`	Review	3	2026-06-15
`0.17.1-20260415T215352Z`	Review	3	2026-06-15
`0.17.2`	Review	3	2026-06-15
`0.17.3-20260615T191957Z`	Review	3	2026-06-15

Block this in CI

PkgRadar gates @quiltdata/benchling-webhook (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @quiltdata/[email protected]