PyPI · pypi.org

cogforge

Credential File Packaged: cogforge-0.2.0/src/cogforge/templates/kb/.env

Why PkgRadar flagged 0.2.0

Severity	Signal	Evidence
high	Credential File Packaged	cogforge-0.2.0/src/cogforge/templates/kb/.env · cogforge-0.2.0/src/cogforge/templates/kb/.env

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.2.0`	High risk	35	2026-05-30
`0.1.8`	High risk	70	2026-05-30
`0.1.7`	High risk	70	2026-05-30
`0.1.6`	High risk	70	2026-05-30

Block this in CI

PkgRadar gates cogforge (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi cogforge==0.2.0