PkgRadar

Package evidence

@devvit/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
3,787Mature · −50% score
First published
Feb 2023
Publisher
colacadstink

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@devvit/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@devvit/[email protected]"],"fail_on":"review"}'
Publishercolacadstink
Artifact bytes1,606,131
Previous version0.13.5-next-2026-06-16-20-30-01-fa0b86e10.0
Published2026-06-16T23:25:58.580Z
SHA-256e4f9b4f5c6a905126e2d0fce4ff136562634db51519630fff1a291b7df4d3935

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.13.5-next-2026-06-16-23-25-19-09e673f20.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts31
  • buildyarn library:build
  • build:minesbuild --bundle --external:@reddit/baseplate --format=esm --minify --sourcemap=linked --target=es2020
  • cleanrm -rf .turbo coverage dist library/src/semanticColors.ts
  • clobberyarn clean && rm -rf node_modules
  • dev:buildchokidar ./library/src ../shared-types/dist --command 'yarn build && echo "BUILD COMPLETE"' --ignore './library/src/semanticColors.ts'
  • library:buildyarn library:build:semantic-colors && yarn library:build:typescript && yarn library:build:styles
  • library:build:custom-stylescd library && postcss custom-styles.css -o ../dist/custom-styles.css
  • library:build:semantic-colorsscripts/make-semantic-colors.js
  • library:build:stylescd library && postcss styles.css -o tailwind-build.css && yarn library:build:styles-dist && yarn library:build:custom-styles
  • library:build:styles-distscripts/make-styles.js
  • library:build:typescripttsc --project tsconfig.json
  • library:devconcurrently -n 'lib:styles,lib:styles-dist,lib:typescript' 'yarn library:dev:styles' 'yarn library:dev:styles-dist' 'yarn library:dev:typescript'
  • library:dev:stylesyarn library:build:styles -w
  • library:dev:styles-distyarn library:build:styles-dist --watch
  • library:dev:typescriptyarn library:build:typescript -w
  • library:lintredlint ./library
  • library:lint:fixyarn library:lint --fix
  • library:testyarn library:test:unit && yarn library:test:types && yarn library:lint
  • library:test:typestsc --noEmit -p library
  • library:test:unitvitest run -r library -c vitest.config.js
  • library:test:unit-with-coverageyarn library:test:unit --coverage
  • lintyarn library:lint && yarn lint:circular-deps
  • lint:circular-depsyarn madge --circular dist/**/*.js
  • lint:fixyarn library:lint:fix
  • prepublishOnlypublish-package-json
  • shreddit:devnode scripts/shreddit-development-bridge.js
  • testyarn library:test && yarn test:size
  • test:sizeyarn build:min --metafile=dist/devvit-custom-post-meta.min.json --outfile=dist/devvit-custom-post.min.js library/src/client/devvit-custom-post.ts && yarn build:min --metafile=dist/devvit-surface-meta.min.json --outfile=dist/devvit-surface.min.js library/src/client/devvit-surface.ts && filesize
  • test:typesyarn library:test:types
  • test:unityarn library:test:unit
  • …and 1 more.
Dependencies7
  • @devvit/multiplatform0.0.1-20250218-2f1c7a2a
  • @devvit/protos0.13.5-next-2026-06-16-23-25-19-09e673f20.0
  • @devvit/runtime-lite0.13.5-next-2026-06-16-23-25-19-09e673f20.0
  • @devvit/shared-types0.13.5-next-2026-06-16-23-25-19-09e673f20.0
  • compare-versions6.1.1
  • nice-grpc-web3.3.3
  • p-queue7.3.4
Optional dependencies1
  • lit^2.0.0