Package evidence

@e-burgos/[email protected]

Remote Payload: matched "curl "

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@e-burgos/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@e-burgos/[email protected]"],"fail_on":"review"}'

Publisherestebanburgos

Artifact bytes3,657,149

Previous version2.1.0

Published2026-05-24T22:59:57.582Z

SHA-25604c92483d40dcabc445a5f5f06f7ce7f050a54f9897f0e51ad7c98177c9d579b

Why flagged

What the scanner saw

Remote Payload: matched "curl "

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

19d agoLast checked

reviewRisk

44Score

2.2.0Version

Status history (1 event)

new → available19d ago · risk review · score 44 · status changed

Evidence

Static findings

4 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
medium	Remote Payload	package/documentation/InstallationSection-aABWM0jE.js	matched "curl "	12
medium	Remote Payload	package/documentation/InstallationSection-Dbq9VVHa.js	matched "curl "	12
medium	Large Javascript Payload	package/index-DEZRGktf.js	2057825 bytes	10
medium	Large Javascript Payload	package/index-sdOMz8GW.js	2912093 bytes	10

Manifest

Package metadata

Scripts4

generate-propstsx ../../scripts/generate-props.ts
install:libcd ../../ui/tucu-ui && pnpm install
pack:libcd ../../ui/tucu-ui && pnpm npm pack
publish:libcd ../../dist/ui/tucu-ui && pnpm npm publish --access public --no-git-checks

Dependencies11

@tailwindcss/typography0.0.0-insiders.0339c42
classnames^2.5.1
framer-motion12.23.3
lucide-react^0.460.0
react-hook-form7.60.0
react-router7.9.1
react-router-dom7.9.1
react-use^17.6.0
recharts3.8.1
swiper11.2.8
zustand^5.0.8