PkgRadar

npm · registry.npmjs.org

create-steedos-app

Credential File Packaged: package/templates/default/.env

Why PkgRadar flagged 3.0.15-beta.11

SeveritySignalEvidence
highCredential File Packagedpackage/templates/default/.env · package/templates/default/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
3.0.15-beta.11Review102026-06-16
2.1.108Low risk02026-06-12
2.1.109Low risk02026-06-12
2.1.110Low risk02026-06-12
3.0.14Review102026-06-12
3.0.15-beta.10Review102026-06-12
3.0.15-beta.9Review102026-06-08
3.0.15-beta.8Review102026-06-05
3.0.15-beta.7Review102026-06-04
3.0.15-beta.6Review102026-06-02
3.0.15-beta.5Review102026-05-29
3.0.15-beta.4Review102026-05-27
3.0.15-beta.2Review352026-05-24
3.0.15-beta.3Review352026-05-24

Block this in CI

PkgRadar gates create-steedos-app (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]