PkgRadar

PyPI · pypi.org

elemm

Credential file access: matched "GITHUB_TOKEN"

Why PkgRadar flagged 1.3.1

SeveritySignalEvidence
mediumCredential file accessmatched "GITHUB_TOKEN" · elemm-1.3.1/src/elemm_gateway/ui_backend/dashboard_server.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.1Review152026-05-28

Block this in CI

PkgRadar gates elemm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi elemm==1.3.1