Package evidence

@datalayer/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 9,400Niche · −30% score
Versions published: 138Mature · −50% score
First published: Jan 2022
Publisher: echarles

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@datalayer/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@datalayer/[email protected]"],"fail_on":"review"}'

Publisherecharles

Artifact bytes554,087

Previous version2.0.7

Published2026-05-14T04:37:23.886Z

SHA-256c5cdd3e56c437935b13a623882d3ae7ff6055922e66074c0a81d1cdf56c71cde

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

8d agoLast checked

lowRisk

0Score

2.0.8Version

Status history (1 event)

new → available8d ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts43

buildnpm run validate:tools && gulp resources-to-lib && tsc --build && node scripts/fix-esm-imports.js && webpack
build:libnpm run validate:tools && gulp resources-to-lib && tsc --build && node scripts/fix-esm-imports.js
build:prodnpm run validate:tools && gulp resources-to-lib && tsc && npm run clean && npm run build:lib
build:tsc:watch:resgulp resources-to-lib-watch
build:tsc:watch:tsctsc --watch
build:vitenpm run validate:tools && vite build
build:webpackcross-env BUILD_APP=true webpack-cli build
cleanrimraf node_modules lib dist build tsconfig.tsbuildinfo
clean:allnpm run clean:lib && npm run clean:labextension && npm run clean:lintcache
clean:labextensionrimraf datalayer/labextension
clean:librimraf lib tsconfig.tsbuildinfo
clean:lintcacherimraf .eslintcache .stylelintcache
devrun-p -c 'start:*'
eslinteslint . --cache --ext .ts,.tsx --fix
eslint:checkeslint . --cache --ext .ts,.tsx
examplerun-p -c 'start:*'
install:extensionnpm run build
kill./../../dev/sh/kill.sh || true
lintnpm run stylelint && npm run prettier && npm run eslint
lint:checknpm run stylelint:check && npm run prettier:check && npm run eslint:check
prettiernpm run prettier:base --write --list-different
prettier:baseprettier "**/*{.ts,.tsx,.js,.jsx,.css,.json,.md}"
prettier:checknpm run prettier:base --check
preview:vitevite preview
startrun-p -c 'start:*'
start-localrun-p -c 'start-local:*'
start-local:jupyter-servercd ./../.. && npm run jupyter:server
start-local:vitecross-env LOCAL_JUPYTER_SERVER=true vite
start-local:webpackcross-env LOCAL_JUPYTER_SERVER=true webpack serve
start-noconfigcross-env NO_CONFIG=true webpack serve
…and 13 more.

Dependencies109

@codemirror/lang-python^6.0.1
@codemirror/state^6.2.0
@codemirror/view^6.7.0
@datalayer/primer-addons^1.0.12
@jupyter-widgets/base^6.0.0
@jupyter-widgets/controls^5.0.0
@jupyter-widgets/html-manager^1.0.0
@jupyter-widgets/jupyterlab-manager^5.0.0
@jupyter-widgets/output^6.0.0
@jupyter/collaboration-extension^4.3.0
@jupyter/docprovider-extension^4.3.0
@jupyter/web-components^0.17.1
@jupyter/ydoc^3.4.1
@jupyterlab/application^4.0.0
@jupyterlab/application-extension^4.0.0
@jupyterlab/apputils^4.0.0
@jupyterlab/apputils-extension^4.0.0
@jupyterlab/cell-toolbar-extension^4.0.0
@jupyterlab/cells^4.0.0
@jupyterlab/codemirror^4.0.0
@jupyterlab/codemirror-extension^4.0.0
@jupyterlab/completer^4.0.0
@jupyterlab/completer-extension^4.0.0
@jupyterlab/console^4.0.0
@jupyterlab/console-extension^4.0.0
@jupyterlab/coreutils^6.0.0
@jupyterlab/csvviewer-extension^4.0.0
@jupyterlab/docmanager^4.0.0
@jupyterlab/docmanager-extension^4.0.0
@jupyterlab/docregistry^4.0.0
…and 79 more.