PkgRadar

npm · registry.npmjs.org

pr-shepherd

Credential file access: matched "GITHUB_TOKEN"

Scanned versions

VersionVerdictScoreScanned (UTC)
0.30.1Low risk02026-06-12
0.30.0Low risk02026-06-11
0.29.0Low risk02026-06-11
0.28.0Low risk02026-06-10
0.27.0Low risk02026-06-09
0.26.3Low risk02026-06-06
0.26.2Low risk02026-06-06
0.26.1Low risk02026-06-03
0.26.0Low risk02026-06-03
0.25.4Review12026-05-29
0.25.3Review12026-05-26
0.25.2Review12026-05-26
0.25.1Review12026-05-25
0.25.0Review502026-05-25
0.24.0Review502026-05-24
0.23.0Review502026-05-24

Block this in CI

PkgRadar gates pr-shepherd (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence