PkgRadar

npm · registry.npmjs.org

matsuri-ui

Credential file access: matched ".npmrc"

Why PkgRadar flagged 18.1.6-alpha-1779514837793-12eb7cb.0

SeveritySignalEvidence
highCredential file accessmatched ".npmrc" · package/package.json
mediumObfuscation Densityhigh encoded/escaped-token density · package/cjs/GlobalMenu/index.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/esm/GlobalMenu/index.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/GlobalMenu/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
18.2.2-alpha-1781500883476-451fc97.0Low risk02026-06-16
19.0.0Low risk02026-06-16
18.2.2-alpha-1781238838423-a941916.0Low risk02026-06-15
18.2.2-alpha-1781229360414-26dfc0f.0Low risk02026-06-12
18.2.2-alpha-1781228789739-1c156ce.0Low risk02026-06-12
18.2.2-alpha-1780905733181-1a161f7.0Low risk02026-06-08
18.2.2-alpha-1780740721220-81c818f.0Low risk02026-06-06
18.2.2-alpha-1780726303291-832b9b0.0Low risk02026-06-06
18.2.2-alpha-1780712086073-47c2324.0Low risk02026-06-06
18.2.2-alpha-1780694014052-14d506e.0Low risk02026-06-05
18.2.1Low risk02026-06-02
18.2.1-alpha-1780308304625-bcc5345.0Low risk02026-06-01
18.2.1-alpha-1780302781604-0e3468d.0Low risk02026-06-01
18.2.0Low risk02026-05-27
18.1.6-alpha-1779514837793-12eb7cb.0Review302026-05-24
18.1.6-alpha-1779605605542-314df8f.0Review302026-05-24

Block this in CI

PkgRadar gates matsuri-ui (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]