PkgRadar

npm · registry.npmjs.org

@smartive/graphql-magic

Credential File Packaged: package/.env

Why PkgRadar flagged 28.0.0

SeveritySignalEvidence
highCredential File Packagedpackage/.env · package/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
28.0.0Review102026-06-17
27.3.0Review102026-06-11
27.2.0Review102026-06-11
27.1.0Review102026-06-09
27.0.0Review102026-06-09
27.0.0-next.3Review102026-06-09
27.0.0-next.2Review102026-06-09
27.0.0-next.1Review102026-06-08
25.0.0-next.1Review102026-06-08
26.0.2Review102026-06-03
26.0.1Review102026-05-28
25.2.0Review122026-05-27
26.0.0Review122026-05-27
25.1.1Review122026-05-27
26.0.0-next.1Review122026-05-27

Block this in CI

PkgRadar gates @smartive/graphql-magic (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @smartive/[email protected]