PkgRadar

npm · registry.npmjs.org

@mastra/server

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 1.38.0-alpha.2

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/probe-image-size-7HF7Q24F.cjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/probe-image-size-M5NYSF5D.js
mediumLarge Javascript Payload2107778 bytes · package/dist/dist-LCJ4JRBS.cjs
mediumLarge Javascript Payload2103711 bytes · package/dist/dist-PAGMKZZS.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-channels-on-lease-20260612211814Low risk02026-06-12
1.42.0Low risk02026-06-12
1.42.0-alpha.4Low risk02026-06-12
0.0.0-channels-on-lease-20260611222452Low risk02026-06-11
1.42.0-alpha.3Low risk02026-06-08
1.42.0-alpha.2Low risk02026-06-06
1.42.0-alpha.1Low risk02026-06-06
1.42.0-alpha.0Low risk02026-06-06
0.0.0-channels-output-processor-20260605211340Low risk02026-06-05
0.0.0-channels-output-processor-20260605192833Low risk02026-06-05
0.0.0-signals-pubsub-reserve-20260605182857Low risk02026-06-05
0.0.0-channels-owner-stream-20260605010922Low risk02026-06-05
0.0.0-channels-owner-stream-20260605033931Low risk02026-06-05
0.0.0-channels-owner-stream-20260605004943Low risk02026-06-05
0.0.0-channels-owner-stream-20260604235257Low risk02026-06-05
0.0.0-channels-owner-stream-20260604231429Low risk02026-06-04
1.41.0Low risk02026-06-04
1.41.0-alpha.0Low risk02026-06-04
0.0.0-yj-ab-demo-20260604080218Low risk02026-06-04
0.0.0-wardpeet-auth-rework-20260604074715Low risk02026-06-04
0.0.0-yj-ab-demo-20260604061738Low risk02026-06-04
0.0.0-yj-ab-demo-20260604051858Low risk02026-06-04
1.40.0Low risk02026-06-03
1.40.0-alpha.0Low risk02026-06-03
0.0.0-yj-ab-demo-20260603185651Low risk02026-06-03
1.39.0Low risk02026-06-03
0.0.0-declined-tool-result-fix-20260602220958Low risk02026-06-02
1.38.0Low risk02026-06-02
1.38.0-alpha.9Low risk02026-06-02
1.38.0-alpha.8Low risk02026-06-02
0.0.0-deploy-alex-2-20260602122535Low risk02026-06-02
1.38.0-alpha.6Low risk02026-06-02
1.38.0-alpha.5Low risk02026-06-01
1.38.0-alpha.4Low risk02026-06-01
1.38.0-alpha.3Low risk02026-05-31
0.0.0-fix-create-observability-org-selection-20260529112852Low risk02026-05-29
0.0.0-feat-playground-ui-input-button-groups-20260529070627Low risk02026-05-29
0.0.0-graph-crash-v3-20260528202217Low risk02026-05-28
1.38.0-alpha.2Review132026-05-28
1.37.2-alpha.1Review132026-05-28
0.0.0-fix-workflow-graph-part-2-20260527233847Review132026-05-28
0.0.0-fix-playground-ui-context-menu-z-index-20260527122415Review132026-05-27
1.37.1Review132026-05-27
1.37.0-alpha.9Review132026-05-27
1.37.0Review132026-05-27
1.37.0-alpha.4Review72026-05-25
1.37.0-alpha.5Review72026-05-25

Block this in CI

PkgRadar gates @mastra/server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mastra/[email protected]
Start free — 25 scans / moView full evidence