PkgRadar

npm · registry.npmjs.org

getdotfiles

Credential file access: matched "GITHUB_TOKEN"

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.1-pre5Review52026-05-25
0.0.1-pre4Review302026-05-25
0.0.1-pre3Review302026-05-24
0.0.1-pre2Review302026-05-24
0.0.1-pre1Review302026-05-24

Block this in CI

PkgRadar gates getdotfiles (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
getdotfiles — npm security scan | PkgRadar