Package evidence

@cj-tech-master/[email protected]

Large Javascript Payload: 2593871 bytes

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 9,695Niche · −30% score
Versions published: 311Established · −30% score
First published: Oct 2025
Publisher: cjnoname

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@cj-tech-master/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@cj-tech-master/[email protected]"],"fail_on":"review"}'

Publishercjnoname

Artifact bytes7,570,940

Previous version9.5.8

Published2026-05-28T22:46:38.648Z

SHA-256b2c6c730c0344e118eed8433bd6e4c7e15274901c40413601a910cd219077a00

Why flagged

What the scanner saw

Large Javascript Payload: 2593871 bytes

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

13d agoLast checked

lowRisk

0Score

9.5.9Version

Status history (1 event)

new → available13d ago · risk low · score 0 · status changed

Evidence

Static findings

1 static · 0 from release diff · showing high-signal first.

No high-signal findings — see all findings below.

Show all 1 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
low	Large Javascript Payload	package/dist/iife/excelts.iife.js	2593871 bytes	0

Manifest

Package metadata

Scripts23

analyze:browserrimraf dist && node --input-type=module -e "import { execSync } from 'node:child_process'; process.env.ANALYZE='true'; execSync('rolldown -c rolldown.config.ts', { stdio: 'inherit' });"
benchmarkrimraf dist && pnpm build && node --expose-gc scripts/benchmark.ts
benchmark:compressrimraf dist && pnpm build && node --expose-gc scripts/benchmark-compress.ts
buildpnpm generate:csv-worker && rimraf dist && concurrently "pnpm build:esm" "pnpm build:cjs" "pnpm build:browser" "pnpm build:browser:bundle" && pnpm build:verify
build:browsertsc --project tsconfig.browser.json && node scripts/fix-esm-imports.ts --dist dist/browser --types dist/browser && node scripts/fix-browser-imports.ts --dir dist/browser
build:browser:bundlerolldown -c rolldown.config.ts
build:cjstsc --project tsconfig.cjs.json && node scripts/fix-cjs-imports.ts
build:esmtsc --project tsconfig.esm.json && node scripts/fix-esm-imports.ts
build:verifytsc --noEmit --ignoreConfig --module NodeNext --moduleResolution NodeNext --lib ESNext,DOM --types node dist/types/index.d.ts dist/types/modules/archive/index.d.ts dist/types/modules/csv/index.d.ts dist/types/modules/formula/index.d.ts dist/types/modules/markdown/index.d.ts dist/types/modules/pdf/index.d.ts dist/types/modules/stream/index.d.ts dist/types/modules/xml/index.d.ts dist/types/modules/word/index.d.ts dist/types/modules/word/html.d.ts dist/types/modules/word/crypto.d.ts dist/types/modules/word/markdown.d.ts dist/types/modules/word/excel.d.ts
checkconcurrently --raw "pnpm type" "pnpm lint" "pnpm format"
cleanpnpm dlx --reporter=silent rimraf "**/node_modules" pnpm-lock.yaml "**/dist" -g && pnpm i
compatibility:reportnode scripts/compatibility-report.ts
examplenode scripts/run-examples.ts
formatoxfmt
generate:csv-workernode scripts/generate-csv-worker-script.ts
lintoxlint
lint:fixoxlint --fix
preversionpnpm check && pnpm build && pnpm test
testvitest run && pnpm test:browser --
test:browserpnpm generate:csv-worker && rimraf dist && pnpm build:browser:bundle && vitest run --config vitest.browser.config.ts
test:watchvitest
typetsgo --noEmit
verify:treeshakenode scripts/treeshake-verify.ts