Package evidence
dagster-community-components==0.10.20
Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"
Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 49
- First published
- May 2026
Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["dagster-community-components==0.10.20"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["dagster-community-components==0.10.20"],"fail_on":"review"}'Why flagged
What the scanner saw
Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 100 · status changed
Evidence
Static findings
124 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Credential file access | dagster_community_components-0.10.20/asset_checks/bigquery_dry_run_check/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/asset_checks/bigquery_table_freshness_check/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/asset_checks/cloud_dlp_pii_check/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/ai/cloud_dlp_inspect_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/ingestion/pubsub_to_database_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/sinks/bigtable_writer_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/sinks/cloud_tasks_enqueue_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/bigquery_vector_search_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/bigtable_reader_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/cloud_monitoring_metrics_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/dataplex_dq_scan_results_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/spanner_query_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
Show all 124 findings (low-signal and informational)
Showing 60 of 124 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Credential file access | dagster_community_components-0.10.20/asset_checks/bigquery_dry_run_check/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/asset_checks/bigquery_table_freshness_check/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/asset_checks/cloud_dlp_pii_check/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/ai/cloud_dlp_inspect_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/ingestion/pubsub_to_database_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/sinks/bigtable_writer_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/sinks/cloud_tasks_enqueue_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/bigquery_vector_search_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/bigtable_reader_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/cloud_monitoring_metrics_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/dataplex_dq_scan_results_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| medium | Credential file access | dagster_community_components-0.10.20/assets/source/spanner_query_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 10 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ai/bigquery_ml_predict_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ai/bigquery_ml_train_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ai/cloud_text_to_speech_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ai/document_ai_extractor/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ai/speech_to_text_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ai/translation_api_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ai/vertex_ai_text_embeddings_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ai/vision_api_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/infrastructure/cloud_functions_invoke_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/infrastructure/cloud_run_job_trigger_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/infrastructure/cloudformation_asset/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/infrastructure/step_functions_asset/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ingestion/bigquery_load_from_gcs_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ingestion/google_calendar_ingestion/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ingestion/google_docs_extractor/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ingestion/google_drive_ingestion/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ingestion/google_sheets_ingestion/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ingestion/kinesis_to_database_asset/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/ingestion/sqs_to_database_asset/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sinks/bigquery_export_to_gcs_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sinks/dataframe_to_s3/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sinks/dlt_dataframe_writer/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sinks/dynamodb_writer/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sinks/firestore_writer_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sinks/pubsub_publish_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/source/cloud_logging_query_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/source/firestore_reader_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sources/aws_cloudwatch_logs_insights_query/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sources/aws_cloudwatch_metrics_query/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/sources/dynamodb_reader/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/assets/transforms/bigquery_create_table_from_query_asset/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/integrations/aws_glue/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/integrations/aws_redshift/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/athena_io_manager/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/athena_io_manager/io_manager.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/delta_lake_io_manager/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/deltalake_polars_io_manager/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/lance_io_manager/io_manager.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/minio_io_manager/io_manager.py | matched "AWS_ACCESS_KEY" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/s3_csv_io_manager/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/s3_csv_io_manager/io_manager.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/s3_parquet_io_manager/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/io_managers/s3_parquet_io_manager/io_manager.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/resources/aws_s3_resource/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/resources/composer_airflow_auth_backend/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/resources/dataform_repository_resource/component.py | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/resources/dynamodb_resource/component.py | matched "aws_access_key" | 5 |
| low | Credential file access | dagster_community_components-0.10.20/resources/sftp_resource/component.py | matched ".ssh/" | 5 |