Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 2,159Mature · −50% score
- First published
- Apr 2023
- Publisher
- raycloud-apaas
Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.
Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@kmkf-fe-packages/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@kmkf-fe-packages/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Remote Payload: matched "cUrl "
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 56 · status changed
Evidence
Static findings
70 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Remote Payload | package/dist/esm/KmErpTradeList/components/PlatformOrderCard.js | matched "cUrl " | 12 |
Show all 70 findings (low-signal and informational)
Showing 60 of 70 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Remote Payload | package/dist/esm/KmErpTradeList/components/PlatformOrderCard.js | matched "cUrl " | 12 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/FormRender/component-dependency-finder.js | matched "\\u5FAA" | 3 |
| low | Obfuscation | package/dist/esm/CustomerServiceToDoList/index.js | matched "\\u5BA2" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/ActionList/index.js | matched "\\u66F4" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/AutoTaskDetail/index.js | matched "\\u547D" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/CloseModal/index.js | matched "\\u5173" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/CurrentNode/index.js | matched "\\u5F53" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/FormRender/index.js | matched "\\u63D0" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/ForWardModal/index.js | matched "\\u8F6C" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/Header/index.js | matched "\\u5F02" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/JumpBuyer/index.js | matched "\\u8054" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/OrderRemark/index.js | matched "\\u6536" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/RejectedModal/index.js | matched "\\u9A73" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/RemarkListModal/index.js | matched "\\u8282" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/RemarkModal/index.js | matched "\\u6DFB" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/RemarkShow/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/ShareLinkModal/index.js | matched "\\u5E38" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/ShopName/index.js | matched "\\u5E97" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/StopModal/index.js | matched "\\u6682" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/SubmitRemindModal/index.js | matched "\\u63D0" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/WithdrawModal/index.js | matched "\\u64A4" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/components/XiaozhiConversation/index.js | matched "\\u6253" | 3 |
| low | Obfuscation | package/dist/esm/FlowTemplateDetailV2/index.js | matched "\\u7ACB" | 3 |
| low | Obfuscation | package/dist/esm/FormRender/index.js | matched "\\u5E97" | 3 |
| low | Obfuscation | package/dist/esm/FormRenderTemplateId/index.js | matched "\\u5E97" | 3 |
| low | Obfuscation | package/dist/esm/KmErpTradeList/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/LBOrderDetail/detail/index.js | matched "\\u8BA2" | 3 |
| low | Obfuscation | package/dist/esm/LBOrderDetail/index.js | matched "\\u5B89" | 3 |
| low | Obfuscation | package/dist/esm/Login/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/SingleShopWorkOrder/components/Card/index.js | matched "\\u4FEE" | 3 |
| low | Obfuscation | package/dist/esm/SingleShopWorkOrder/components/CustomizeFormModal/index.js | matched "\\u5173" | 3 |
| low | Obfuscation | package/dist/esm/SingleShopWorkOrder/components/DeleteCustomizeOrderModal/index.js | matched "\\u5220" | 3 |
| low | Obfuscation | package/dist/esm/SingleShopWorkOrder/index.js | matched "\\u63D0" | 3 |
| low | Obfuscation | package/dist/esm/WdtTradeList/components/fields/Goods/index.js | matched "\\u8865" | 3 |
| low | Obfuscation | package/dist/esm/WdtTradeList/components/OrderForm/index.js | matched "\\u552E" | 3 |
| low | Obfuscation | package/dist/esm/WdtTradeList/index.js | matched "\\u4EA4" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/CustomerServiceToDoCard/index.js | matched "\\u5BA2" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/DeletePaymentWorkOrderModal/index.js | matched "\\u4F5C" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/ExamineModal/index.js | matched "\\u5BA1" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/FlagPayModal/index.js | matched "\\u6253" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/LogModal/index.js | matched "\\u8BB0" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/PaymentFormModal/index.js | matched "\\u67E5" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/PaymentWorkOrderCard/index.js | matched "\\xA5" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/QnOpenWangWang/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/RepeatWorkOrderListModal/index.js | matched "\\u91CD" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/components/UnExamineModal/index.js | matched "\\u53D6" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/PaymentWorkOrderList/index.js | matched "\\u63D0" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/Reminder/index.js | matched "\\u5F02" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/WorkOrderList/components/CustomizeWorkOrderCard/index.js | matched "\\u8BE6" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/WorkOrderList/components/LogicFlowList/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/components/WorkOrderList/index.js | matched "\\u6CA1" | 3 |
| low | Obfuscation | package/dist/esm/WorkOrder/index.js | matched "\\u786E" | 3 |
| low | Obfuscation | package/dist/esm/WdtTradeList/components/OrderDrawer.js | matched "\\u65B0" | 3 |
| low | Obfuscation | package/dist/esm/LBOrderDetail/detail/OrderInfo.js | matched "\\uFF1A" | 3 |
| low | Obfuscation | package/dist/esm/KmErpTradeList/components/OrderLogDrawer.js | matched "\\u8BA2" | 3 |
| low | Obfuscation | package/dist/esm/KmErpTradeList/components/PlatformOrderCard.js | matched "\\u5E93" | 3 |
| low | Obfuscation | package/dist/esm/WdtTradeList/components/OrderForm/ReissueItems.js | matched "\\u8865" | 3 |
| low | Obfuscation | package/dist/esm/KmErpTradeList/components/Search.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/TradeList/components/Search.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/WdtTradeList/components/Search.js | matched "\\u8BF7" | 3 |
Manifest
Package metadata
Scripts14
buildyarn run lint && father builddeploynpm run docs:build && npm run docs:deploydocs:builddumi builddocs:deploygh-pages -d docs-distlinteslint '**/*.{ts,tsx}'lint:fixeslint --fix '**/*.{ts,tsx}'prepublishOnlynpm run buildprettierprettier --write "**/*.{js,jsx,tsx,ts,less,md,json}"pubnpm publish --registry=https://registry.npmjs.org/startdumi devsyncyarn build && yalc pushtestumi-testtest:coverageumi-test --coveragewatchnodemon --ignore dist/ --ignore node_modules/ --watch src/ -C -e ts,tsx,less --debug -x 'yarn async'
Dependencies14
@ant-design/icons^4.7.0@kmkf-fe-packages/basic-components2.7.3-beta.8@kmkf-fe-packages/kmkf-utils2.7.3-beta.8@kmkf-fe-packages/services-components2.7.3-beta.8@reduxjs/toolkit^1.8.5ahooks^3.7.4copy-to-clipboard^3.3.3js-base64^3.7.8js-md5^0.7.3kmkf-monitor^0.8.9qrcode.react^1.0.1react-redux^7.2.8store2^2.14.2voca^1.4.0