Package evidence

@cms0/[email protected]

no findings

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@cms0/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@cms0/[email protected]"],"fail_on":"review"}'

Publisherjeffrey0606

Artifact bytes88,496

Previous version0.2.25

Published2026-05-24T05:16:47.090Z

SHA-2563c080bf85039f64f7180adecd7e8990e0f711baea67e3f6e43aa43748dc3ef1e

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

23d agoLast checked

lowRisk

0Score

0.2.26Version

Status history (1 event)

new → available23d ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts20

buildpnpm run build:clean && pnpm run build:prepare && pnpm run build:esm && pnpm run build:cjs && pnpm run build:finalize
build:cjstsc -p tsconfig.cjs.json
build:cleannode -e "require('fs').rmSync('dist', { recursive: true, force: true });"
build:esmtsc -p tsconfig.json
build:finalizenode ./finalize-build.cjs
build:packpnpm run build:prepare && pnpm run build:esm && pnpm run build:cjs && pnpm run build:finalize
build:preparepnpm -C ../shared build && node ./scripts/ensure-generated-schema-descriptor.cjs
cms0:buildtsx src/cli.ts build
cms0:watchtsx src/cli.ts watch
devpnpm run dev:setup && pnpm run dev:esm
dev:cjsnode -e "const chokidar=require('chokidar');const {execFileSync}=require('node:child_process');const path=require('node:path');const pkgRoot=process.cwd();const watchTargets=[path.join(pkgRoot,'src'),path.join(pkgRoot,'tsconfig.cjs.json'),path.join(pkgRoot,'finalize-build.cjs'),path.join(pkgRoot,'scripts','ensure-generated-schema-descriptor.cjs')];let running=false;let queued=false;const rebuild=()=>{if(running){queued=true;return;}running=true;do{queued=false;try{execFileSync('pnpm',['run','build:cjs'],{cwd:pkgRoot,stdio:'inherit'});execFileSync(process.execPath,['./finalize-build.cjs'],{cwd:pkgRoot,stdio:'inherit'});console.log('[cms0] rebuilt cjs output');}catch(error){console.error('[cms0] cjs rebuild failed');}}while(queued);running=false;};const watcher=chokidar.watch(watchTargets,{ignoreInitial:true});watcher.on('all',(_event,changedPath)=>{console.log('[cms0] change detected: '+path.relative(pkgRoot,changedPath));rebuild();});rebuild();const stop=()=>{watcher.close().finally(()=>process.exit(0));};process.on('SIGINT',stop);process.on('SIGTERM',stop);"
dev:clitsx src/cli.ts dev
dev:esmtsc -w -p tsconfig.json --preserveWatchOutput
dev:setuppnpm -C ../shared run dev:setup && node ./scripts/ensure-generated-schema-descriptor.cjs
testpnpm test:unit && pnpm test:integration
test:integrationpnpm -C ../.. exec vitest run --config vitest.config.ts --project cms0-integration
test:unitpnpm -C ../.. exec vitest run --config vitest.config.ts --project cms0-unit
typecheckpnpm run typecheck:prepare && tsc -p tsconfig.json --noEmit
typecheck:preparenode ./scripts/ensure-generated-schema-descriptor.cjs
watch:typestsc --watch -p tsconfig.json

Dependencies4

@cms0/shared0.2.26
chokidar^4.0.3
ts-morph^27.0.2
typescript^5.9.3