PkgRadar

npm · registry.npmjs.org

@retreejs/convex

Credential File Packaged: package/.env

Why PkgRadar flagged 0.4.12

SeveritySignalEvidence
highCredential File Packagedpackage/.env · package/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
0.4.12High risk242026-06-11
0.4.13High risk242026-06-11
0.3.0High risk242026-06-10
0.2.7High risk242026-06-10
0.2.6High risk242026-06-10
0.4.11High risk242026-06-10
0.4.10High risk242026-06-10
0.4.9High risk242026-06-10
0.4.8High risk352026-06-10
0.4.7High risk242026-06-10
0.4.5High risk242026-06-10
0.4.6High risk242026-06-10
0.4.4High risk242026-06-10
0.4.3High risk242026-06-10
0.4.2High risk242026-06-10
0.4.1High risk242026-06-10
0.4.0High risk242026-06-10
0.3.1High risk242026-06-10

Block this in CI

PkgRadar gates @retreejs/convex (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @retreejs/[email protected]
Start free — 25 scans / moView full evidence