Package evidence

@awell-health/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published: 815Mature · −50% score
First published: May 2023
Publisher: ebomcke-awell

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@awell-health/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@awell-health/[email protected]"],"fail_on":"review"}'

Publisherebomcke-awell

Artifact bytes1,413,562

Previous version2.1.117

Published2026-06-03T12:54:42.830Z

SHA-256f9831b07c440c41f7d008d6c3ff5d2debf2e5bcd0e8bf54c9cec39cc7f832f45

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

43h agoLast checked

lowRisk

0Score

2.1.118Version

Status history (1 event)

new → available43h ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts12

buildtsc -p tsconfig.build.json && echo 'Built new dist/' && yarn copy-markdown
cleanrimraf dist/* && echo 'Cleaned dist/'
compiletsc
copy-markdownnode copy-markdown.js && echo 'Copied markdown files to dist/'
generate-extensionts-node ./scripts/generate-extension.ts
linteslint "**/*.{ts,tsx}"
prepackyarn build
preparehusky
startnode dist/src/index.js
testjest --verbose --testPathIgnorePatterns '.*\.local\.test\.ts$'
test-localjest --verbose
test-serverts-node-dev --respawn --transpile-only ./src/test-server.ts

Dependencies53

@airtop/sdk^0.1.44
@awell-health/awell-sdk0.1.29
@awell-health/extensions-core1.1.11
@awell-health/healthie-sdk^0.1.1
@calcom/embed-react^1.5.3
@dropbox/sign^1.8.0
@hubspot/api-client^11.2.0
@langchain/core0.3.80
@langchain/openai0.5.13
@mailchimp/mailchimp_transactional^1.0.50
@medplum/core^3.1.4
@metriport/api-sdk^18.8.1
@sendgrid/client^7.7.0
@sendgrid/helpers^7.7.0
@sendgrid/mail^7.7.0
@slack/web-api^7.13.0
@types/json-schema^7.0.15
api^6.0.0
axios^1.15.2
body-parser1.20.4
cheerio1.1.0
crypto-js^4.2.0
date-fns^2.29.3
date-fns-tz^2.0.1
docusign-esign7.0.0-rc1
driver-license-validator2.0.2
express4.22.0
form-data4.0.4
graphql^16.8.1
graphql-request5.1.0
…and 23 more.