Advisories for Npm/Aegir package

aegir may leak secrets from environment variables in the browser bundle published to npm.

aegir is a module to help automate JavaScript project management. aegir publishes to npm the GitHub user token.

The module publishes to npm the user (that peformed a aegir-release) GitHub token.