Package evidence

@acurast/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 392
Versions published: 35Mature · −50% score
First published: Jun 2024
Publisher: papers_ch

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@acurast/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@acurast/[email protected]"],"fail_on":"review"}'

Publisherpapers_ch

Artifact bytes73,923

Previous version0.9.0

Published2026-05-25T11:11:01.566Z

SHA-256da986513b55e938e555e9369a0ee2906b5660527b2bdfb827eb0ad8e33500e3a

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

19d agoLast checked

lowRisk

0Score

0.9.1Version

Status history (1 event)

new → available19d ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts6

buildnpx tsc && node -e "require('fs').copyFileSync('./src/util/live-code-processor.js', './dist/util/live-code-processor.js')"
prettiernpx prettier . --write
setupnpm run build && npm i -g .
startnpm run build && node dist/index.js
testjest
test-livenpm run build && node ./dist/index.js live

Dependencies28

@acurast/dapp^1.0.1
@acurast/devtools^1.0.1
@acurast/sdk^1.2.2
@inquirer/prompts^5.0.5
@polkadot/api^16.1.2
@polkadot/api-augment^16.1.2
@polkadot/keyring^14.0.0
@polkadot/types^16.1.2
@polkadot/types-codec^16.1.2
@polkadot/util^14.0.0
@polkadot/util-crypto^14.0.0
@polkadot/wasm-crypto^7.3.2
adm-zip^0.5.16
ansis^4.1.0
bignumber.js^9.3.0
bip39^3.1.0
cli-progress^3.12.0
commander^12.1.0
dotenv^16.5.0
figlet^1.8.1
inquirer^9.2.23
is-interactive^2.0.0
listr2^8.3.3
log-symbols^6.0.0
needle^3.3.1
open^8.4.2
parse-duration^1.1.0
stdin-discarder^0.2.2