PkgRadar

PyPI · pypi.org

pydepgate

Credential file access: matched ".ssh/"

Why PkgRadar flagged 0.6.0

SeveritySignalEvidence
highCredential file accessmatched ".ssh/" · pydepgate-0.6.0/src/pydepgate/enrichers/_magic.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.6.0High risk352026-06-14
0.5.0High risk352026-05-30

Block this in CI

PkgRadar gates pydepgate (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi pydepgate==0.6.0