PkgRadar

npm · registry.npmjs.org

ui-soxo-bootstrap-core

Credential file access: matched ".aws/"

Why PkgRadar flagged 2.6.40-dev.11

SeveritySignalEvidence
highCredential file accessmatched ".aws/" · package/core/components/component-loader/component-loader.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.6.40-dev.11Review92026-06-11
2.6.40-dev.1Review302026-06-09
2.6.40-dev.0Review302026-06-09
2.6.32-dev.10Review302026-06-09
2.6.32-dev.8Review302026-06-02
2.6.32-dev.7Review782026-05-26
2.6.39Review332026-05-26

Block this in CI

PkgRadar gates ui-soxo-bootstrap-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]