Package evidence

@ixo/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published: 16Established · −30% score
First published: May 2025
Publisher: michael-ixo

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@ixo/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@ixo/[email protected]"],"fail_on":"review"}'

Publishermichael-ixo

Artifact bytes236,885

Previous version1.2.2

Published2026-06-01T19:40:04.067Z

SHA-256159d0fa982e48c12c9bfe85f92006b72922eea77651e7e7acade2ebec5dc6547

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

11d agoLast checked

lowRisk

0Score

1.2.3Version

Status history (1 event)

new → available11d ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts5

buildrimraf dist && tsc && tsc-alias
generategraphql-codegen --config codegen.yml
testvitest run
test:coveragevitest run --coverage
test:watchvitest

Dependencies31

@cosmjs/crypto0.32.4
@cosmjs/encoding0.32.4
@cosmjs/proto-signing0.32.4
@cosmjs/stargate0.32.4
@ixo/did-provider-x^0.0.2
@ixo/impactxclient-sdk2.4.1
@ixo/logger0.0.2
@ixo/matrixclient-sdk^1.0.0
@veramo/core^6.0.0
@veramo/credential-ld^6.0.0
@veramo/credential-w3c^6.0.0
@veramo/did-manager^6.0.0
@veramo/did-provider-key^6.0.0
@veramo/did-resolver^6.0.0
@veramo/key-manager^6.0.0
@veramo/kms-local^6.0.0
ajv8.17.1
ajv-formats3.0.1
axios1.7.8
axios-retry4.5.0
bs58^6.0.0
did-resolver4.1.0
dotenv^17.2.3
eciesjs^0.4.15
graphql^16.10.0
graphql-request7.1.2
graphql-tag^2.12.6
jose^6.0.8
limiter2.1.0
store2.0.12
…and 1 more.