npm · registry.npmjs.org
@steedos/service-package-registry
Credential file access: matched ".npmrc"
Why PkgRadar flagged 3.0.14
| Severity | Signal | Evidence |
|---|---|---|
| medium | Credential file access | matched ".npmrc" · package/main/default/manager/loader.js |
| medium | Credential file access | matched ".npmrc" · package/main/default/manager/login.js |
| medium | Credential file access | matched ".npmrc" · package/main/default/manager/npm_login.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.0.14 | Review | 18 | 2026-06-12 |
3.0.15-beta.10 | Review | 18 | 2026-06-12 |
3.0.15-beta.9 | Review | 18 | 2026-06-08 |
3.0.15-beta.8 | Review | 18 | 2026-06-05 |
3.0.15-beta.7 | Review | 18 | 2026-06-04 |
3.0.15-beta.6 | Review | 18 | 2026-06-02 |
3.0.15-beta.5 | Review | 18 | 2026-05-29 |
3.0.15-beta.4 | Review | 18 | 2026-05-27 |
3.0.15-beta.3 | Review | 50 | 2026-05-24 |
3.0.15-beta.2 | Review | 50 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @steedos/[email protected]