Package evidence
@agent-pattern-labs/[email protected]
Install-time lifecycle script: postinstall="node bin/sync.mjs"
Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 5
- First published
- May 2026
- Publisher
- razroo
Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@agent-pattern-labs/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@agent-pattern-labs/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Install-time lifecycle script: postinstall="node bin/sync.mjs"
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 5 · status changed
Evidence
Static findings
1 static · 0 from release diff · showing high-signal first.
No high-signal findings — see all findings below.
Show all 1 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| low | Install-time lifecycle script | package.json | postinstall="node bin/sync.mjs" | 5 |
Manifest
Package metadata
Scripts85
batchbatch/batch-runner.shbuild:configiso-route build models.yaml --out . && iso-harness buildcache:getnode bin/lead-harness.mjs cache:getcache:hasnode bin/lead-harness.mjs cache:hascache:keynode bin/lead-harness.mjs cache:keycache:listnode bin/lead-harness.mjs cache:listcache:prunenode bin/lead-harness.mjs cache:prunecache:putnode bin/lead-harness.mjs cache:putcache:statusnode bin/lead-harness.mjs cache:statuscache:verifynode bin/lead-harness.mjs cache:verifycanon:comparenode bin/lead-harness.mjs canon:comparecanon:explainnode bin/lead-harness.mjs canon:explaincanon:keynode bin/lead-harness.mjs canon:keycanon:normalizenode bin/lead-harness.mjs canon:normalizecapabilities:checknode bin/lead-harness.mjs capabilities:checkcapabilities:explainnode bin/lead-harness.mjs capabilities:explaincapabilities:listnode bin/lead-harness.mjs capabilities:listcontext:checknode bin/lead-harness.mjs context:checkcontext:explainnode bin/lead-harness.mjs context:explaincontext:listnode bin/lead-harness.mjs context:listcontext:plannode bin/lead-harness.mjs context:plancontext:rendernode bin/lead-harness.mjs context:renderfacts:buildnode bin/lead-harness.mjs facts:buildfacts:hasnode bin/lead-harness.mjs facts:hasfacts:querynode bin/lead-harness.mjs facts:queryfacts:statusnode bin/lead-harness.mjs facts:statusfacts:verifynode bin/lead-harness.mjs facts:verifyguard:auditnode bin/lead-harness.mjs guard:auditguard:explainnode bin/lead-harness.mjs guard:explainindex:buildnode bin/lead-harness.mjs index:build- …and 55 more.
Dependencies20
@agent-pattern-labs/iso-cache^0.1.1@agent-pattern-labs/iso-canon^0.1.1@agent-pattern-labs/iso-capabilities^0.1.1@agent-pattern-labs/iso-context^0.1.1@agent-pattern-labs/iso-contract^0.1.1@agent-pattern-labs/iso-facts^0.1.1@agent-pattern-labs/iso-guard^0.1.1@agent-pattern-labs/iso-index^0.1.1@agent-pattern-labs/iso-ledger^0.1.1@agent-pattern-labs/iso-lineage^0.1.1@agent-pattern-labs/iso-migrate^0.1.1@agent-pattern-labs/iso-orchestrator^0.2.1@agent-pattern-labs/iso-postflight^0.1.1@agent-pattern-labs/iso-preflight^0.1.1@agent-pattern-labs/iso-prioritize^0.1.1@agent-pattern-labs/iso-redact^0.1.1@agent-pattern-labs/iso-score^0.1.1@agent-pattern-labs/iso-timeline^0.1.1@agent-pattern-labs/iso-trace^0.5.1playwright^1.58.1