PkgRadar

Package evidence

@cms0/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
1,733Niche · −30% score
Versions published
42
First published
Jan 2026
Publisher
jeffrey0606

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@cms0/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@cms0/[email protected]"],"fail_on":"review"}'
Publisherjeffrey0606
Artifact bytes90,533
Previous version0.3.0
Published2026-05-29T04:16:00.681Z
SHA-25685fb9a2a9a6a95f704195f5843aed20cb032d5d81a77f60163deb758098bf09e

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.4.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts20
  • buildpnpm run build:clean && pnpm run build:prepare && pnpm run build:esm && pnpm run build:cjs && pnpm run build:finalize
  • build:cjstsc -p tsconfig.cjs.json
  • build:cleannode -e "require('fs').rmSync('dist', { recursive: true, force: true });"
  • build:esmtsc -p tsconfig.json
  • build:finalizenode ./finalize-build.cjs
  • build:packpnpm run build:prepare && pnpm run build:esm && pnpm run build:cjs && pnpm run build:finalize
  • build:preparepnpm -C ../shared build && node ./scripts/ensure-generated-schema-descriptor.cjs
  • cms0:buildtsx src/cli.ts build
  • cms0:watchtsx src/cli.ts watch
  • devpnpm run dev:setup && pnpm run dev:esm
  • dev:cjsnode -e "const chokidar=require('chokidar');const {execFileSync}=require('node:child_process');const path=require('node:path');const pkgRoot=process.cwd();const watchTargets=[path.join(pkgRoot,'src'),path.join(pkgRoot,'tsconfig.cjs.json'),path.join(pkgRoot,'finalize-build.cjs'),path.join(pkgRoot,'scripts','ensure-generated-schema-descriptor.cjs')];let running=false;let queued=false;const rebuild=()=>{if(running){queued=true;return;}running=true;do{queued=false;try{execFileSync('pnpm',['run','build:cjs'],{cwd:pkgRoot,stdio:'inherit'});execFileSync(process.execPath,['./finalize-build.cjs'],{cwd:pkgRoot,stdio:'inherit'});console.log('[cms0] rebuilt cjs output');}catch(error){console.error('[cms0] cjs rebuild failed');}}while(queued);running=false;};const watcher=chokidar.watch(watchTargets,{ignoreInitial:true});watcher.on('all',(_event,changedPath)=>{console.log('[cms0] change detected: '+path.relative(pkgRoot,changedPath));rebuild();});rebuild();const stop=()=>{watcher.close().finally(()=>process.exit(0));};process.on('SIGINT',stop);process.on('SIGTERM',stop);"
  • dev:clitsx src/cli.ts dev
  • dev:esmtsc -w -p tsconfig.json --preserveWatchOutput
  • dev:setuppnpm -C ../shared run dev:setup && node ./scripts/ensure-generated-schema-descriptor.cjs
  • testpnpm test:unit && pnpm test:integration
  • test:integrationpnpm -C ../.. exec vitest run --config vitest.config.ts --project cms0-integration
  • test:unitpnpm -C ../.. exec vitest run --config vitest.config.ts --project cms0-unit
  • typecheckpnpm run typecheck:prepare && tsc -p tsconfig.json --noEmit
  • typecheck:preparenode ./scripts/ensure-generated-schema-descriptor.cjs
  • watch:typestsc --watch -p tsconfig.json
Dependencies4
  • @cms0/shared0.4.0
  • chokidar^4.0.3
  • ts-morph^27.0.2
  • typescript^5.9.3