npm · registry.npmjs.org
@ssa-ui-kit/templates
Credential File Packaged: package/.env
Why PkgRadar flagged 1.0.10
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential File Packaged | package/.env · package/.env |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.0.10 | High risk | 17 | 2026-06-16 |
1.0.14 | High risk | 17 | 2026-06-16 |
1.0.15 | High risk | 17 | 2026-06-16 |
3.12.1 | Low risk | 0 | 2026-06-16 |
3.12.0 | Low risk | 0 | 2026-06-04 |
3.11.0 | Low risk | 0 | 2026-05-29 |
3.10.2 | Low risk | 0 | 2026-05-27 |
3.10.5 | Low risk | 0 | 2026-05-27 |
Block this in CI
pkgradar gate --ecosystem npm @ssa-ui-kit/[email protected]