- Big update!Introducing GitHub Bot Commands. Learn more →
Environment variable access
Severity
Low
Description
Package accesses environment variables, which may be a sign of credential stuffing or data theft.
Suggestion
Packages should be clear about which environment variables they access, and care should be taken to ensure they only access environment variables they claim to.
Packages with this issue
supports-color
Detect whether a terminal supports color
sindresorhus
published 5.5.0 • semver
The semantic version parser used by npm.
lukekarrys
published 7.3.7 • readable-stream
Node.js Streams, a user-land copy of the stream library from Node.js
matteo.collina
published 4.1.0 •