Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 356Mature · −50% score
- First published
- Apr 2019
- Publisher
- CircleCI
Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.
Recommended action
Looks clean — keep monitoringNo high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@algolia/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@algolia/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Obfuscation Density: high encoded/escaped-token density
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk low · score 0 · status changed
Evidence
Static findings
1 static · 0 from release diff · showing high-signal first.
No high-signal findings — see all findings below.
Show all 1 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| low | Obfuscation Density | package/dist/cjs/Helpers/TextWrap/TextWrap.js | high encoded/escaped-token density | 0 |
Manifest
Package metadata
Scripts21
accessibilityyarn build:storybook && yarn clean-reports && run-p -r serve:storybook test-storybookbuildcross-env NODE_ENV=production run-p build:types build:js build:css build:scssbuild:_jsbabel src --extensions ".ts,.tsx,.js" --ignore "src/**/*.d.ts,src/**/*.stories.tsx,src/**/*.test.ts,src/**/*.test.tsx"build:cjscross-env BABEL_MODULE_TYPE=CJS yarn build:_js --out-dir dist/cjsbuild:csscross-env NODE_ENV=production postcss -o dist/satellite.min.css src/styles/satellite.cssbuild:esmcross-env BABEL_MODULE_TYPE=ESM yarn build:_js --out-dir dist/esmbuild:jsrun-p build:esm build:cjsbuild:scssnode ./scripts/build-scss-variables.jsbuild:storybookstorybook build -o .storybook-staticbuild:typesnode ./scripts/build-types.jschromaticcross-env NODE_ENV=storybook chromatic --build-script-name build:storybook --exit-zero-on-changes --auto-accept-changes master --exit-once-uploadedcleanrimraf distclean-reportsrimraf .reportsdevstorybook dev -p 6060linteslint --rulesdir ./.eslint_rules/ 'src/**/*.{ts,tsx}'qualityrun-s test type-check lintserve:storybookhttp-server .storybook-static -s -p 6060testjest --config jest.config.ts --runInBand --coveragetest-storybookwait-on tcp:6060 && test-storybook --url http://localhost:6060 --maxWorkers=2 && yarn test-storybook-process-reportstest-storybook-process-reportsnode ./scripts/process-reports.jstype-checktsc --noEmit
Dependencies38
@babel/runtime^7.21.0@monaco-editor/react^4.6.0@popperjs/core^2.4.4@radix-ui/react-accordion1.2.2@radix-ui/react-avatar1.1.2@radix-ui/react-collapsible1.1.2@radix-ui/react-dialog1.1.4@radix-ui/react-dropdown-menu2.1.4@radix-ui/react-popover1.1.4@radix-ui/react-progress1.1.1@radix-ui/react-separator1.1.1@radix-ui/react-slider1.2.2@radix-ui/react-slot1.1.1@radix-ui/react-tabs1.1.2@radix-ui/react-toast1.2.4@radix-ui/react-toggle1.1.1@radix-ui/react-toggle-group1.1.1@radix-ui/react-tooltip1.1.6@radix-ui/react-visually-hidden1.1.1@tailwindcss/container-queries^0.1.1clsx^2.0.0color^4.2.3date-fns^2.29.3diacritics^1.3.0downshift^8lodash^4.17.21lucide-react^0.561.0react-day-picker^8.0.7react-dropzone^11.7.1react-markdown^10.1.0- …and 8 more.