Package evidence
@kengic/[email protected]
Install-time lifecycle script: preinstall="node bin/preinstall.mjs"
Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Weekly downloads
- 1,064Niche · −30% score
- Versions published
- 828Mature · −50% score
- First published
- Feb 2023
- Publisher
- kengic
Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.
Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@kengic/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@kengic/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Install-time lifecycle script: preinstall="node bin/preinstall.mjs"
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 5 · status changed
Evidence
Static findings
3 static · 0 from release diff · showing high-signal first.
No high-signal findings — see all findings below.
Show all 3 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| low | Install-time lifecycle script | package.json | preinstall="node bin/preinstall.mjs" | 5 |
| low | Install-time lifecycle script | package.json | postinstall="node bin/postinstall.mjs" | 5 |
| low | Large Javascript Payload | package/dist/kengic-vue.js | 6881535 bytes | 0 |
Manifest
Package metadata
Scripts33
- -------------------------------------------------- --------------------------------------------------- -------------------------------------------------- -------------------------------------------------- ---------------------------------------------------------------------------------------------buildnpm run use-node && rimraf dist && vue-tsc && vite buildbuild--developmentnpm run use-node && rimraf dist && vue-tsc && vite build --mode developmentbump--betanpm run use-node && tsx script/bump.ts betabump--majornpm run use-node && tsx script/bump.ts majorbump--minornpm run use-node && tsx script/bump.ts minorbump--patchnpm run use-node && tsx script/bump.ts patchbump-to--luotao--smartfactory.product.wms.wms--dev-3.2npm run use-node && tsx script/bump-to--luotao.smartfactory.product.wms.wms--dev-3.2.tsbump-to--luotao--smartfactory.product.wms.wms--project-kengic-factorynpm run use-node && tsx script/bump-to--luotao--smartfactory.product.wms.wms--project-kengic-factory.tscnpm--syncnpm run use-node && npx cnpm --yes sync @kengic/vuecopy-to--luotao--smartfactory.product.simulator--mainnpm run build--development && tsx script/copy-to--luotao--smartfactory.product.simulator--main.tscopy-to--luotao--smartfactory.product.wms.wms--dev-3.2npm run build--development && tsx script/copy-to--luotao--smartfactory.product.wms.wms--dev-3.2.tscopy-to--luotao--smartfactory.product.wms.wms--hiwaynpm run build--development && tsx script/copy-to--luotao--smartfactory.product.wms.wms--hiway.tscopy-to--luotao--smartfactory.product.wms.wms--project-kengic-factorynpm run build--development && tsx script/copy-to--luotao--smartfactory.product.wms.wms--project-kengic-factory.tscopy-to--luotao--smartfactory.product.wms.wms--project-kengic-factory-integrationnpm run build--development && tsx script/copy-to--luotao--smartfactory.product.wms.wms--project-kengic-factory-integration.tscopy-to--luotao--smartfactory.product.wms.wms--project-kengic-factory-testnpm run build--development && tsx script/copy-to--luotao--smartfactory.product.wms.wms--project-kengic-factory-test.tscopy-to--luotao--smartfactory.product.wms.wms--project-zonsen-ducarnpm run build--development && tsx script/copy-to--luotao--smartfactory.product.wms.wms--project-zonsen-ducar.tscopy-to--luotao--smartfactory.tyre.haohua.basic.was-java--PcrTireWebnpm run build--development && tsx script/copy-to--luotao--smartfactory.tyre.haohua.basic.was-java--PcrTireWeb.tscopy-to--luotao--smartfactory.tyre.product-cp.view--FMS3.2npm run build--development && tsx script/copy-to--luotao--smartfactory.tyre.product-cp.view--FMS3.2.tsgen-apis--WMSnpm run use-node && kengic-pont generate-apis --config kg.config.ts --origin WMSpostinstallnode bin/postinstall.mjspreinstallnode bin/preinstall.mjspublish--betanpm run bump--beta && tsx script/publish.tspublish--majornpm run bump--major && tsx script/publish.tspublish--minornpm run bump--minor && tsx script/publish.ts- …and 3 more.
Dependencies79
@ant-design/colors6.0.0@ant-design/icons-vue6.1.0@iconify-icons/akar-icons1.2.19@iconify-icons/ant-design1.2.7@iconify-icons/eos-icons1.2.6@iconify-icons/fluent-mdl21.2.1@iconify-icons/material-symbols1.2.58@iconify-icons/mdi1.2.48@iconify-icons/ph1.2.5@iconify/vue4.1.2@kengic/core.core0.0.7@kengic/pont2.1.2@rys-fe/vite-plugin-theme0.8.6@thymine/xunee0.4.9-beta.47@types/crypto-js4.1.1@types/fs-extra9.0.13@types/inquirer8.2.5@types/lodash-es4.17.9@types/md52.3.5@types/node18.18.4@types/qs6.15.0@types/semver7.5.3@types/store2.0.3@types/uuid10.0.0@vitejs/plugin-legacy2.3.1@vitejs/plugin-vue3.2.0@vitejs/plugin-vue-jsx1.3.10@vueuse/core8.9.4@vueuse/shared8.9.4ant-design-vue3.2.14- …and 49 more.