wp-env

no static findings

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.0.0`	High risk	0	2026-07-14
`1.0.1`	Low risk	0	2026-06-04

Block this in CI

PkgRadar gates wp-env (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]

wp-env — npm malware advisory | PkgRadar