PkgRadar

npm · registry.npmjs.org

@vybestack/llxprt-code-mcp

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Scanned versions

VersionVerdictScoreScanned (UTC)
0.10.0-nightly.260613.1adad3b34Review12026-06-13
0.10.0-nightly.260613.bda4680cdLow risk02026-06-13

Block this in CI

PkgRadar gates @vybestack/llxprt-code-mcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vybestack/[email protected]