Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 642Mature · −50% score
- First published
- Nov 2018
- Publisher
- lzxue
Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.
Recommended action
Looks clean — keep monitoringNo high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@antv/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@antv/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Large Javascript Payload: 7827994 bytes
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk low · score 0 · status changed
Evidence
Static findings
1 static · 0 from release diff · showing high-signal first.
No high-signal findings — see all findings below.
Show all 1 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| low | Large Javascript Payload | package/build/L7.js | 7827994 bytes | 0 |
Manifest
Package metadata
Scripts32
buildrollup -c --environment BUILD:productionbuild-devrollup -c --environment BUILD:devbuild-libbabel src --out-dir libbuild-prodrollup -c --environment BUILD:productionbuild-prod-minrollup -c --environment BUILD:production,MINIFY:truebundlerelectron ./bundler/app.jscinpm run lint && npm run testcompressnpm run compress-l7compress-coreuglifyjs -c -m -o dist/l7-core.min.js -- build/l7-core.jscompress-l7uglifyjs -c -m -o dist/l7.min.js -- build/l7.jscompress-simpleuglifyjs -c -m -o dist/l7-simple.min.js -- build/l7-simple.jscoveragenpm run coverage-generator && npm run coverage-viewercoverage-generatortorch --compile --coverage --renderer --recursive test/unitcoverage-viewertorch-coveragedemoselectron ./demos/app.jsdemos-webnode ./demos/app.js --web --port 2046devnpm run watch & npm run demos-webdistnpm run build-dev && npm run build-prod && npm run build-prod-minlinteslint --ext .html,.js ./lint-fixeslint --ext .html,.js --fix ./mkdir-distnode ./bin/mkdir-dist.jsprepublishOnlynpm run build-lib && npm run distscreenshotnode ./bin/screenshot.jsstartnpm run watch-devtesttorch --compile-opts ./.torch.compile.opts.js --compile --renderer --recursive test/unittest-allnpm run test && npm run test-bugstest-bugstorch --compile --renderer --recursive test/bugstest-bugs-livetorch --compile --interactive --watch --recursive test/bugstest-livetorch --compile --interactive --watch --recursive test/unitwatchwebpack --config webpack-dev.config.js- …and 2 more.
Dependencies27
@antv/g^3.1.3@antv/geo-coord^1.0.8@antv/util~2.0.1@mapbox/geojson-rewind^0.4.0@mapbox/tiny-sdf^1.1.0@mapbox/vector-tile^1.3.1@turf/bbox^6.0.1@turf/clean-coords^6.0.1@turf/invariant^6.1.2@turf/meta^6.0.2d3-dsv^1.0.10d3-hexbin^0.2.2earcut^2.1.3fecha^2.3.3geojson-rewind^0.3.1gl-matrix^2.4.1gl-vec2^1.3.0lodash^4.17.5pbf^3.2.0polyline-miter-util^1.0.1rbush^2.0.2simple-statistics^7.0.1supercluster^6.0.1three^0.101.1viewport-mercator-project^5.2.0webworkify-webpack^2.1.3wolfy87-eventemitter~5.2.4