Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Weekly downloads
- 10
- Versions published
- 8
- First published
- Jun 2021
- Publisher
- surelee
Recommended action
Looks clean — keep monitoringNo high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@egova/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@egova/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Large Javascript Payload: 3360865 bytes
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk low · score 0 · status changed
Evidence
Static findings
3 static · 0 from release diff · showing high-signal first.
No high-signal findings — see all findings below.
Show all 3 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| low | Large Javascript Payload | package/dist/index.common.js | 3360865 bytes | 0 |
| low | Large Javascript Payload | package/dist/index.umd.js | 3361345 bytes | 0 |
| low | Large Javascript Payload | package/dist/ts.worker.js | 4553474 bytes | 0 |
Manifest
Package metadata
Scripts5
distrimraf tsconfig.tsbuildinfo && npm run dist:build && npm run dist:typesdist:buildvue-cli-service build --target lib --name index src/index.tsdist:typestsc -d --emitDeclarationOnly --declarationDir dist/typeslintvue-cli-service lintservevue-cli-service serve
Dependencies22
@egova/flagwind-core>=1.1.4@egova/flagwind-echarts>=1.0.14@egova/flagwind-web>=1.0.27core-js>=3.6.5echarts>=4.6.0equals>=1.0.5halo-math>=1.0.9html2canvas>=1.0.0-rc.7lodash>=4.17.20lodash.debounce>=4.0.8lodash.throttle>=4.1.1monaco-editor>=0.23.0monaco-editor-webpack-plugin>=3.1.0view-design>=4.5.0vue>=2.6.11vue-class-component>=7.2.3vue-module-loader>=1.0.3vue-property-decorator>=8.4.0vue-router>=3.2.0vuedraggable>=2.24.3vuex>=3.4.0vuex-class>=0.3.2