Package evidence

@acedatacloud/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 1,671Niche · −30% score
Versions published: 475Mature · −50% score
First published: May 2024
Publisher: germey

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@acedatacloud/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@acedatacloud/[email protected]"],"fail_on":"review"}'

Publishergermey

Artifact bytes4,145,135

Previous version3.255.1

Published2026-06-05T18:05:41.507Z

SHA-256a61998d5736807799b0a16270c47b08d1011f0dea184a8fc17b837d34ec957a9

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

22h agoLast checked

lowRisk

0Score

3.255.2Version

Status history (1 event)

new → available22h ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts22

analyzevite-bundle-visualizer
buildnpm run build:web
build:androidcross-env VITE_SURFACE=android vite build
build:ioscross-env VITE_SURFACE=ios vite build
build:webcross-env VITE_SURFACE=web vue-tsc -b && vite build
bumpbeachball bump
changebeachball change --no-commit
devvite --host
linteslint src --fix
lint:checkeslint src
lint:stagedlint-staged
pack:androidnpm run build:android && npx cap copy android
pack:iosnpm run build:ios && npx cap copy ios
preparehusky
prettierprettier --write .
previewvite preview
releasebeachball publish --access public
sync-versionnode scripts/sync-native-version.js
testvitest
test:runvitest run
translatepython3 scripts/translate_i18n.py
verifybeachball check

Dependencies60

@capacitor-community/apple-sign-in^7.1.0
@capacitor-community/stripe^8.1.1
@capacitor/app^8.0.1
@capacitor/browser^8.0.1
@capgo/capacitor-updater^8.47.6
@codemirror/lang-java^6.0.1
@codemirror/lang-javascript^6.1.2
@codemirror/lang-json^6.0.1
@codemirror/lang-php^6.0.1
@codemirror/lang-python^6.1.1
@codemirror/theme-one-dark^6.1.0
@fingerprintjs/fingerprintjs^4.5.1
@fortawesome/fontawesome-svg-core^7.2.0
@fortawesome/free-brands-svg-icons^6.2.1
@fortawesome/free-regular-svg-icons^6.2.1
@fortawesome/free-solid-svg-icons^6.2.1
@fortawesome/vue-fontawesome^3.0.2
@icon-park/vue-next^1.3.6
@mdit/plugin-katex^0.23.1
@skjnldsv/vue-plyr^7.5.0
@solana/wallet-adapter-base^0.9.27
@solana/wallet-adapter-nightly^0.1.20
@solana/wallet-adapter-phantom^0.9.29
@solana/wallet-adapter-solflare^0.6.33
@solana/wallet-adapter-walletconnect^0.1.21
@solana/web3.js^1.98.2
@vueuse/motion^3.0.3
aegis-web-sdk^1.41.13
axios^1.6.0
chart.js^4.5.1
…and 30 more.