PyPI · pypi.org

mentat-gulp

Credential File Packaged: mentat_gulp-1.7.403/.env

Why PkgRadar flagged 1.7.403

Severity	Signal	Evidence
high	Credential File Packaged	mentat_gulp-1.7.403/.env · mentat_gulp-1.7.403/.env

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.7.403`	High risk	40	2026-06-12
`1.7.402`	High risk	40	2026-06-06
`1.7.401`	High risk	40	2026-06-06
`1.7.400`	High risk	40	2026-05-30
`1.7.300`	High risk	40	2026-05-30

Block this in CI

PkgRadar gates mentat-gulp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi mentat-gulp==1.7.403