PkgRadar

Package evidence

@exodus/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
2,253Niche · −30% score
Versions published
7
First published
Apr 2019
Publisher
andrejb

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@exodus/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@exodus/[email protected]"],"fail_on":"review"}'
Publisherandrejb
Artifact bytes32,687
Previous version1.17.11-exodus.1
Published2023-01-17T14:00:50.840Z
SHA-2563581600f31b7d51e3dd60511c14f0ab05cb5edf534fde2bd886605bb3b1ed1d1

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
1.17.11-exodus.2Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts23
  • build:e2e:androidscripts/android_e2e.sh 'build'
  • build:e2e:iosscripts/ios_e2e.sh 'build'
  • build:e2e:macosscripts/macos_e2e.sh 'build'
  • bundle:androidscripts/android_e2e.sh 'bundle'
  • bundle:iosscripts/ios_e2e.sh 'bundle'
  • bundle:macosreact-native bundle --entry-file index.ts --platform macos --bundle-output example/index.macos.jsbundle
  • ciyarn --pure-lockfile --non-interactive
  • formatconcurrently yarn:format:*
  • format:cclang-format -i $(git ls-files '*.cpp' '*.h' '*.m' '*.mm')
  • format:jsprettier --write $(git ls-files '*.js' '*.json' '*.md' '*.ts' '*.tsx' '*.yml')
  • preparebob build
  • startreact-native start
  • start:androidreact-native run-android
  • start:iosreact-native run-ios --project-path example/ios
  • start:macosreact-native run-macos --project-path example/macos --scheme AsyncStorageExample
  • start:webexpo start:web
  • start:windowsinstall-windows-test-app -p example/windows && react-native run-windows --root example --logging --no-packager --no-telemetry
  • testconcurrently -n lint,ts yarn:test:lint yarn:test:ts
  • test:e2e:androiddetox test -c android.emu.release --maxConcurrency 1
  • test:e2e:iosdetox test -c ios.sim.release --maxConcurrency 1
  • test:e2e:macosscripts/macos_e2e.sh 'test'
  • test:linteslint src/**/*.ts example/**/*.ts jest/*.js
  • test:tstsc --project tsconfig.all.json
Dependencies1
  • merge-options^3.0.4