Package evidence

@exellix/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 1,759Niche · −30% score
Versions published: 47
First published: May 2026
Publisher: exellix

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@exellix/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@exellix/[email protected]"],"fail_on":"review"}'

Publisherexellix

Artifact bytes531,541

Previous version9.1.1

Published2026-06-13T14:26:38.692Z

SHA-2560406dc28e5355e6ab98db8ed33bd1ba4bb216376bf7b8acde1f17b570558201d

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

7h agoLast checked

lowRisk

0Score

10.0.0Version

Status history (1 event)

new → available7h ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts17

buildtsc
deps:latestnpx npm-check-updates -u && npm install
devts-node src/index.ts
local:narrix:allnpm run local:narrix:subnets && npm run local:narrix:assets && npm run local:narrix:vuln-groups && npm run local:narrix:vuln-instances
local:narrix:assetsnode dist/localTasks/narrixAssetPlayground.js
local:narrix:subnetsnode dist/localTasks/narrixSubnetPlayground.js
local:narrix:vuln-groupsnode dist/localTasks/narrixVulnGroupPlayground.js
local:narrix:vuln-instancesnode dist/localTasks/narrixVulnInstancePlayground.js
prepublishOnlynpm run build && node scripts/ensure-nx-content-md-variants.mjs
publish:task-strategiestsx scripts/publish-ai-task-strategies-catalog.ts
testnode scripts/ensure-xynthesis-dist.mjs && node scripts/ensure-ai-skills-dist.mjs && node scripts/clean-dist-test.mjs && tsc -p tsconfig.test.json && node scripts/copy-test-fixtures.mjs && node --test --test-force-exit --test-concurrency=1 dist-test/test/node-execution/**/*.js dist-test/test/narrix/*.js dist-test/test/narrix-then-execute/*.js dist-test/test/aiScoping/*.js dist-test/test/intermediateSteps/*.js dist-test/test/post-steps/*.js dist-test/test/planWebScopeQuestions/*.js dist-test/test/synthesis/*.js dist-test/test/utils/*.js dist-test/test/errors/*.js dist-test/test/validation/*.js dist-test/test/task-strategies/*.js dist-test/test/observability/*.js dist-test/test/run-task/*.js dist-test/test/internal/*.js dist-test/test/execution-strategies/*.js dist-test/test/invocation/*.js dist-test/test/e2e/*.js
test:e2e:intermediateStepsnode scripts/run-with-env.mjs RUN_INTERMEDIATE_STEPS_E2E=1 npm run test
test:e2e:synthesisnode scripts/run-synthesis-e2e.mjs
test:e2e:webScopenode scripts/run-web-scope-e2e.mjs
test:livenode scripts/run-live-ai-e2e.mjs
test:narrix:livenode scripts/check-narrix-archive.mjs && node scripts/run-npm-test-with-narrix-ingest.mjs
test:with-narrix-ingestnode scripts/run-npm-test-with-narrix-ingest.mjs

Dependencies29

@exellix/ai-skills^6.10.0
@exellix/memorix-narrix-adapter^2.0.0
@exellix/narrix-adapter-chat^2.0.0
@exellix/narrix-adapter-docs^2.0.0
@exellix/narrix-adapter-records^2.0.0
@exellix/narrix-adapter-text^2.0.0
@exellix/narrix-adapters-core^2.0.0
@exellix/narrix-catalox^2.0.0
@exellix/narrix-cni^2.0.0
@exellix/narrix-ingest^2.0.0
@exellix/narrix-runner^2.0.0
@exellix/narrix-web-scoper^2.0.0
@exellix/xynthesis^4.8.2
@x12i/activix^8.6.3
@x12i/ai-profiles^3.4.0
@x12i/catalox^5.2.0
@x12i/env^4.0.1
@x12i/execution-memory-manager^1.2.0
@x12i/funcx^4.9.13
@x12i/graphenix-core^2.0.1
@x12i/graphenix-executable-contracts^2.0.1
@x12i/graphenix-plan-format^2.0.1
@x12i/graphenix-trace-format^2.0.1
@x12i/logxer^4.6.0
@x12i/optimixer^3.5.2
@x12i/rendrix^4.3.0
@x12i/search-adapter^1.5.1
handlebars^4.7.8
nx-cache^1.0.2