PkgRadar

PyPI · pypi.org

niivue-streamlit

Credential File Packaged: niivue_streamlit-0.3.1.dev56/niivue_component/frontend/.npmrc

Why PkgRadar flagged 0.3.1.dev56

SeveritySignalEvidence
highCredential File Packagedniivue_streamlit-0.3.1.dev56/niivue_component/frontend/.npmrc · niivue_streamlit-0.3.1.dev56/niivue_component/frontend/.npmrc

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.1.dev56High risk352026-06-06
0.3.1.dev55High risk352026-06-05
0.3.1.dev54High risk352026-06-04
0.3.1.dev53High risk352026-06-03
0.3.1.dev52High risk352026-06-02
0.3.1.dev51High risk352026-06-01
0.3.1.dev49High risk352026-06-01
0.3.1.dev50High risk352026-06-01
0.3.1.dev48High risk352026-05-30
0.3.1.dev47High risk352026-05-30
0.0.0.dev46High risk352026-05-30
0.0.0.dev45High risk352026-05-30
0.0.0.dev44High risk352026-05-30
0.0.0.dev43High risk352026-05-30

Block this in CI

PkgRadar gates niivue-streamlit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi niivue-streamlit==0.3.1.dev56