npm · registry.npmjs.org

@rutter/bottleneck

Credential File Packaged: package/.env

Why PkgRadar flagged 2.19.5

Severity	Signal	Evidence
high	Credential File Packaged	package/.env · package/.env
medium	Remote Dependency Spec	devDependencies.ejs-cli="github:SGrondin/ejs-cli#master" · package.json

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.19.5`	High risk	43	2026-06-17
`2.19.6`	High risk	43	2026-06-17
`2.19.7`	High risk	43	2026-06-17

Block this in CI

PkgRadar gates @rutter/bottleneck (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @rutter/[email protected]