PkgRadar

npm · registry.npmjs.org

@stoker-platform/cli

Credential File Packaged: package/init-files/.env/.env

Why PkgRadar flagged 0.5.101

SeveritySignalEvidence
highCredential File Packagedpackage/init-files/.env/.env · package/init-files/.env/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
0.5.101High risk242026-06-14
0.5.100High risk242026-06-12
0.5.99High risk242026-06-12
0.5.98High risk242026-06-12
0.5.97High risk242026-06-10
0.5.96High risk242026-06-10
0.5.95High risk242026-06-10
0.5.94High risk242026-06-10
0.5.93High risk242026-06-10

Block this in CI

PkgRadar gates @stoker-platform/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @stoker-platform/[email protected]
@stoker-platform/cli — npm security scan | PkgRadar