PkgRadar

npm · registry.npmjs.org

firebase-tools

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Scanned versions

VersionVerdictScoreScanned (UTC)
15.17.0Review42026-06-10
15.19.1Review42026-06-03
15.18.0Review62026-05-28
15.19.0Review62026-05-28

Block this in CI

PkgRadar gates firebase-tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]