PkgRadar

npm · registry.npmjs.org

@wix/cli

Credential file access: matched ".npmrc"

Why PkgRadar flagged 1.1.216

SeveritySignalEvidence
mediumCredential file accessmatched ".npmrc" · package/build/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.216Review52026-06-16
1.1.217Review52026-06-16
1.1.215Review52026-06-11
1.1.214Review52026-06-11
1.1.213Review52026-06-10
1.1.212Review52026-06-10
1.1.211Review52026-06-10
1.1.210Review52026-06-08
1.1.209Review52026-06-07
1.1.208Review52026-06-03
1.1.207Review52026-06-01
1.1.205Review492026-05-27
1.1.206Review492026-05-27
1.1.203Review492026-05-26
1.1.204Review492026-05-26
1.1.202Review492026-05-25
1.1.201Review1052026-05-25
1.1.200Review1122026-05-24
1.1.198Review1122026-05-24
1.1.199Review1122026-05-24

Block this in CI

PkgRadar gates @wix/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @wix/[email protected]
Start free — 25 scans / moView full evidence