Package evidence

@dhis2/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published: 321Mature · −50% score
First published: Aug 2019
Publisher: dhis2-bot

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@dhis2/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@dhis2/[email protected]"],"fail_on":"review"}'

Publisherdhis2-bot

Artifact bytes55,627

Previous version12.11.0-beta.1

Published2026-03-17T08:40:21.211Z

SHA-2563ca30fa631633891edccf033a0cccd57d2723090dde1b9bee0be7e624dc5176e

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

16h agoLast checked

lowRisk

0Score

12.11.0-beta.2Version

Status history (1 event)

new → available16h ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts1

testd2-app-scripts test

Dependencies50

@babel/core^7.27.4
@babel/plugin-syntax-dynamic-import^7.8.3
@babel/plugin-syntax-flow^7.24.7
@babel/plugin-transform-class-properties^7.27.1
@babel/plugin-transform-nullish-coalescing-operator^7.27.1
@babel/plugin-transform-optional-chaining^7.27.1
@babel/plugin-transform-private-methods^7.27.1
@babel/plugin-transform-private-property-in-object^7.27.1
@babel/preset-env^7.27.2
@babel/preset-react^7.0.0
@babel/preset-typescript^7.27.1
@dhis2/app-shell12.11.0-beta.2
@dhis2/cli-helpers-engine^3.2.2
@jest/core^27.0.6
@pmmmwh/react-refresh-webpack-plugin^0.5.4
@vitejs/plugin-react^4.2.1
@yarnpkg/lockfile^1.1.0
archiver^7.0.1
axios^0.25.0
babel-jest^27.0.6
babel-loader^8.1.0
babel-plugin-react-require^3.1.3
chokidar^3.3.0
css-loader^6.7.1
detect-port^1.3.0
dotenv^8.1.0
dotenv-expand^5.1.0
fast-glob^3.3.3
file-loader^6.2.0
form-data^3.0.0
…and 20 more.