Package evidence

@brizy/[email protected]

Remote Dependency Spec: dependencies.antd="https://github.com/bagrinsergiu/ant-design/archive/refs/heads/4.7.0-fix-rc-select-v6.tar.gz"

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 108
Versions published: 190Mature · −50% score
First published: Mar 2020
Publisher: lift46252

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@brizy/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@brizy/[email protected]"],"fail_on":"review"}'

Publisherlift46252

Artifact bytes7,174,709

Previous version0.9.107

Published2026-04-06T15:04:40.810Z

SHA-2565c297e6f0df9e493533d82aaa6c06af4f9611c509b1e286f2cd1bbf21a485764

Why flagged

What the scanner saw

Remote Dependency Spec: dependencies.antd="https://github.com/bagrinsergiu/ant-design/archive/refs/heads/4.7.0-fix-rc-select-v6.tar.gz"

1 remote tarball(s) were followed statically.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

10d agoLast checked

reviewRisk

7Score

0.9.108Version

Status history (1 event)

new → available10d ago · risk review · score 7 · status changed

Evidence

Static findings

2 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
high	Remote Dependency Spec	package.json	dependencies.antd="https://github.com/bagrinsergiu/ant-design/archive/refs/heads/4.7.0-fix-rc-select-v6.tar.gz"	12
medium	Remote Dependency Spec	package.json	dependencies.react-custom-scrollbars="github:bagrinsergiu/react-custom-scrollbars#4.2.1.3-rc"	12

Remote payloads

Followed remote artifacts

Source	URL	Risk	Score	Summary
dependencies.antd	https://github.com/bagrinsergiu/ant-design/archive/refs/heads/4.7.0-fix-rc-select-v6.tar.gz	error	0	unexpected end of file

Manifest

Package metadata

Scripts14

buildnpm run clean && npm run build:es && npm run build:lib && npm run build:dist
build:distNODE_ENV=production gulp build
build:esNODE_ENV=production tsc
build:libNODE_ENV=production npm run build:es -- --module commonjs --outDir lib
cleanrimraf es/ lib/ dist/
i18ni18next && ../../.github/workflows/ci_cd/localization.sh
linteslint .
prepacknpm i && npm run build
prettier:checkprettier --config ../../.prettierrc --ignore-path ../../.prettierignore --check "**/*.{js,jsx,ts,tsx,mdx,md}"
prettier:writeprettier --config ../../.prettierrc --ignore-path ../../.prettierignore --write "**/*.{js,jsx,ts,tsx,mdx,md}"
startconcurrently --kill-others "tsc --watch" "tsc --watch --module commonjs --outDir lib" "gulp build ---watch"
stylelintstylelint --config stylelint.config.js "./src/**/*.less"
testNODE_ENV=test TZ=UTC jest
tsctsc --noEmit

Dependencies32

@ant-design/cssinjs^1.23.0
@ant-design/icons^6.0.0
@brizy/ui-icons^0.0.50
@loadable/component^5.16.4
@popperjs/core^2.11.8
antdhttps://github.com/bagrinsergiu/ant-design/archive/refs/heads/4.7.0-fix-rc-select-v6.tar.gz
antd-v5npm:antd@^5.22.3
cheerio1.0.0-rc.12
classnames^2.5.1
codemirror^5.65.18
downshift^3.4.8
fuzzy-search^3.2.1
i18next^23.16.5
lottie-react^2.4.0
lottie-web^5.12.2
moment^2.30.1
ramda0.27.1
react-codemirror2^8.0.0
react-color^2.19.3
react-custom-scrollbarsgithub:bagrinsergiu/react-custom-scrollbars#4.2.1.3-rc
react-draggable^4.4.6
react-facebook^9.0.12
react-i18next^11.17.2
react-player^2.16.0
react-popper^2.3.0
react-quill^2.0.0
react-transition-group^4.4.5
react-virtualized-auto-sizer^1.0.24
react-virtuoso^3.1.5
tailwindcss^3.4.15
…and 2 more.