PkgRadar

Package evidence

@amityco/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
40
First published
May 2026
Publisher
platform-butler

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@amityco/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@amityco/[email protected]"],"fail_on":"review"}'
Publisherplatform-butler
Artifact bytes571,064
Previous version1.0.0
Published2026-06-12T07:37:38.939Z
SHA-25666d58b390f8e34d7d1dd50a750bea13d2e5b4197e4748b34e9fd1091c8b35245

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
1.0.1Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts82
  • bench:audit-boundariesnode bench/audit-marker-boundaries.mjs
  • bench:experience-calibrationnode benchmarks/experience-calibration/run.mjs
  • bench:experience-calibration:advisory-seedsnpm run build && node benchmarks/experience-calibration/run-pilot.mjs --seed s1 && node benchmarks/experience-calibration/run-pilot.mjs --seed s2 && node benchmarks/experience-calibration/run-pilot.mjs --seed s3
  • bench:experience-calibration:conditional-feasibilitynpm run build && node benchmarks/experience-calibration/conditional-feasibility-eval.mjs --json reviews/conditional-feasibility-eval.json
  • bench:experience-calibration:dogfood-previewnpm run build && node benchmarks/experience-calibration/run-dogfood-preview.mjs
  • bench:experience-calibration:dogfood-summarynode benchmarks/experience-calibration/dogfood-summary.mjs
  • bench:experience-calibration:input-mode-previewnpm run build && node benchmarks/experience-calibration/run-input-mode-preview.mjs
  • bench:experience-calibration:matrixnpm run build && node benchmarks/experience-calibration/run-matrix.mjs
  • bench:experience-calibration:matrix-reviewnode benchmarks/experience-calibration/review-matrix.mjs
  • bench:experience-calibration:pilotnpm run build && node benchmarks/experience-calibration/run-pilot.mjs
  • bench:experience-calibration:reviewnode benchmarks/experience-calibration/review-shadow-policy.mjs
  • bench:experience-calibration:shadow-pilotnpm run build && node benchmarks/experience-calibration/run-pilot.mjs --arm shadow-policy
  • bench:experience-calibration:v1-pilotnpm run build && node benchmarks/experience-calibration/run-pilot.mjs --arm shadow-policy --policy shadow-policy-v1-draft
  • bench:experience-calibration:v1-reviewnode benchmarks/experience-calibration/review-v1-seeds.mjs
  • bench:experience-calibration:v1-seedsnpm run build && node benchmarks/experience-calibration/run-pilot.mjs --arm shadow-policy --policy shadow-policy-v1-draft --seed s1 && node benchmarks/experience-calibration/run-pilot.mjs --arm shadow-policy --policy shadow-policy-v1-draft --seed s2 && node benchmarks/experience-calibration/run-pilot.mjs --arm shadow-policy --policy shadow-policy-v1-draft --seed s3
  • bench:experience-calibration:v2-human-gatenode benchmarks/experience-calibration/review-v2-human-gate.mjs
  • bench:experience-calibration:v2-matrixnpm run build && node benchmarks/experience-calibration/run-matrix.mjs --policy shadow-policy-v2-draft --shadow-only
  • bench:experience-calibration:v2-matrix-reviewnode benchmarks/experience-calibration/review-matrix.mjs --policy shadow-policy-v2-draft
  • bench:experience-calibration:v3-diagnosisnpm run build && node benchmarks/experience-calibration/shadow-policy-v3-eval.mjs --held-out dogfood/gate2-feasibility-bias-heldout.json --json reviews/shadow-policy-v3-diagnosis.json
  • bench:fn-discoverynpm run build && node benchmarks/fn-discovery/run-fn-discovery.mjs
  • bench:gatenpm run build && node bench/tp-dashboard.mjs && node test/run-fixture-symmetry.mjs && node test/run-native-idioms.mjs && node test/run-grader-facts.mjs && node test/run-happy-path-clean.mjs
  • bench:ground-truthnode bench/ground-truth.mjs
  • bench:harness-e2e:semanticnpm run build && node benchmarks/harness-e2e/run-semantic-journey.mjs
  • bench:symbols-driftnode bench/grader/build-symbols.mjs --check
  • bench:tpnpm run build && node bench/tp-dashboard.mjs
  • buildtsc -p tsconfig.json
  • pack:checknpm pack --dry-run --cache /tmp/social-plus-forge-npm-cache
  • postbuildchmod +x dist/server.js
  • publish:checknpm run validate && npm publish --dry-run --access public --cache /tmp/social-plus-forge-npm-cache
  • sdk-surface:importnode scripts/import-sdk-surface.mjs
  • …and 52 more.
Dependencies5
  • @modelcontextprotocol/sdk^1.12.0
  • tree-sitter^0.21.1
  • tree-sitter-kotlin^0.3.8
  • tree-sitter-swift^0.7.1
  • tree-sitter-typescript^0.23.2