Package evidence

@platform-x/[email protected]

Credential file access: matched ".AWS"

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@platform-x/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@platform-x/[email protected]"],"fail_on":"review"}'

Publisherswathi.m

Artifact bytes37,154

Previous version1.4.2

Published2026-05-25T06:03:59.206Z

SHA-256e55e96927859aaaa0a44bd96a9354450f2abab4bea89fce714ddcdb169abf973

Why flagged

What the scanner saw

Credential file access: matched ".AWS"

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

19d agoLast checked

reviewRisk

15Score

1.4.4Version

Status history (1 event)

new → available19d ago · risk review · score 15 · status changed

Evidence

Static findings

2 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
medium	Credential file access	package/dist/src/config/index.js	matched ".AWS"	10

Show all 2 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
medium	Credential file access	package/dist/src/config/index.js	matched ".AWS"	10
low	Credential file access	package/dist/src/platform-x/services/sesEmail.services.js	matched ".AWS"	5

Manifest

Package metadata

Scripts4

buildtsc && npm run copy-static
copy-staticxcopy src\templates dist\templates /E /I /Y
devstartnpm run build && tsc-watch --onSuccess "node ./dist/src/index.js"
startnode ./dist/src/index.js

Dependencies39

@alloc/quick-lru^5.2.0
@aws-sdk/client-ses3.1049.0
@sendgrid/helpers7.7.0
@sendgrid/mail^7.6.0
@types/bunyan^1.8.6
@types/bunyan-format^0.2.3
@types/cls-hooked^4.3.3
@types/dompurify^3.0.5
@types/express^4.17.12
@types/lodash^4.14.171
@types/node^15.12.2
@types/nodemailer^8.0.0
@types/twilio^3.19.2
apollo-datasource^3.3.2
apollo-server-caching^3.3.0
axios0.21.4
bunyan^1.8.15
bunyan-format^0.2.1
cls-hooked^4.2.2
dataloader^2.0.0
dompurify^3.2.4
dotenv^10.0.0
ejs^3.1.10
express^4.17.1
fs^0.0.1-security
hep-secret-access^1.3.4
jsdom^26.1.0
lodash4.17.21
moment2.29.4
moment-timezone0.5.34
…and 9 more.