PkgRadar

npm · registry.npmjs.org

@rvoh/create-psychic

Credential file access: matched ".npmrc"

Why PkgRadar flagged 3.5.1

SeveritySignalEvidence
mediumCredential file accessmatched ".npmrc" · package/dist/cjs/src/helpers/new/copyApiBoilerplate.js
mediumCredential file accessmatched ".npmrc" · package/dist/esm/src/helpers/new/copyApiBoilerplate.js

Scanned versions

VersionVerdictScoreScanned (UTC)
3.5.1Review102026-06-16
3.4.2Low risk02026-06-16
3.4.3Low risk02026-06-16
3.4.4Low risk02026-06-16
3.5.0Review102026-06-16

Block this in CI

PkgRadar gates @rvoh/create-psychic (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @rvoh/[email protected]