PkgRadar

Package evidence

@kontur.candy/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
665
Versions published
375Mature · −50% score
First published
Nov 2018
Publisher
rydmi

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@kontur.candy/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@kontur.candy/[email protected]"],"fail_on":"review"}'
Publisherrydmi
Artifact bytes2,556,496
Previous version2.250.0
Published2026-06-06T12:56:22.194Z
SHA-2562655301b307ad37c350c01d45f2756f4a8f0deab6662182e04025d76d8aae0fa

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
2.251.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts15
  • buildnpm run build:client && npm run build:common && npm run build:cli && npm run build:front
  • build:clibabel src --env-name node --config-file ../babel.config.js --out-dir distr/Tools/src --extensions .js,.jsx,.ts,.tsx --copy-files --delete-dir-on-start
  • build:clientcd .. && npm run client:build-for-tools && npm run client:copy-static && cd Tools
  • build:commonbabel ../Common --env-name node --config-file ../babel.config.js --out-dir distr/Common --extensions .js,.jsx,.ts,.tsx --copy-files --delete-dir-on-start && rimraf distr/Common/package.json
  • build:frontcd LocalServerFrontEnd && npm run build && cd ..
  • generate-changelogconventional-changelog -n ../.changelog-config/ToolsChangeConfig.js -i CHANGELOG.md -s -t release/tools/v
  • generate-readmebabel-node --env-name node --config-file ../babel.config.js -x .ts,.js src/GenerateReadMe.ts
  • preparecd LocalServerFrontEnd && npm install
  • run-scriptbabel-node --extensions ".ts,.tsx,.js,.jsx"
  • tools:publishcd .. && npm run candy-tools:publish
  • versionnpm run generate-changelog && npm run generate-readme && git add --all
  • watchrun-p --print-label watch:*
  • watch:clibabel src --env-name node --config-file ../babel.config.js --out-dir distr/Tools/src --extensions .js,.jsx,.ts,.tsx --copy-files --delete-dir-on-start --watch
  • watch:commonnode scripts/watch-common.js
  • watch:frontcd LocalServerFrontEnd && npm start && cd ..
Dependencies61
  • @babel/core7.24.*
  • @babel/plugin-proposal-decorators7.24.*
  • @babel/plugin-proposal-export-default-from7.24.*
  • @babel/plugin-syntax-object-rest-spread^7.8.3
  • @babel/plugin-transform-class-properties7.24.*
  • @babel/plugin-transform-flow-strip-types7.24.*
  • @babel/preset-env7.24.*
  • @babel/preset-react7.24.*
  • @babel/preset-typescript7.24.*
  • @babel/register7.24.*
  • @babel/runtime^7.24.6
  • @skbkontur/logger0.0.3
  • adm-zip^0.5.16
  • ansi_up5.1.0
  • autoprefixer10.4.0
  • babel-loader8.2.3
  • body-parser1.19.0
  • boxen5.1.2
  • chalk4.1.2
  • chokidar^3.5.3
  • classnames^2.3.1
  • command-line-args5.2.0
  • command-line-usage6.1.1
  • cookie-parser1.4.6
  • core-js3.48.0
  • core-js-compat3.48.0
  • css-loader6.5.1
  • express4.17.1
  • file-loader6.2.0
  • fs-extra9.1.0
  • …and 31 more.