PkgRadar

Package evidence

@liascript/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
787
Versions published
192Mature · −50% score
First published
Feb 2021
Publisher
liascript

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@liascript/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@liascript/[email protected]"],"fail_on":"review"}'
Publisherliascript
Artifact bytes25,940,475
Previous version3.3.3--1.0.10
Published2026-06-16T10:42:07.038Z
SHA-256ca25b5c20a7a34710dc3b35df5eeb6200bdb6a362b9967e0729ee8b887072914

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
3.3.4--1.0.10Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts33
  • __postinstallnpx puppeteer browsers install chrome
  • __preinstallcd LiaScript && npm i && npm run build:scorm1.2 && cp -r dist ../assets/scorm1.2
  • asset:capacitorcd LiaScript && git stash && git checkout feat/capacitor8 && rm -rf node_modules && npm i && npm run build:indexeddb && cp -r dist ../dist/assets/capacitor && git checkout development && rm -rf node_modules && npm i
  • asset:deduplicate./scripts/deduplicate-assets.sh
  • asset:indexeddbcd LiaScript && npm i && npm run build:indexeddb && cp -r dist ../dist/assets/indexeddb
  • asset:logocp -r LiaScript/resources dist
  • asset:pdfcd LiaScript && git stash && git checkout feat/fullPage && rm -rf node_modules && npm i && npm run build:pdf && cp -r dist ../dist/assets/pdf && git checkout development && rm -rf node_modules && npm i
  • asset:scorm1.2cd LiaScript && npm i && npm run build:scorm1.2 && cp -r dist ../dist/assets/scorm1.2
  • asset:scorm2004cd LiaScript && npm i && npm run build:scorm2004 && cp -r dist ../dist/assets/scorm2004
  • asset:webcd LiaScript && npm i && npm run build:base && cp -r dist ../dist/assets/web
  • asset:xapicd LiaScript && npm i && npm run build:xapi && cp -r dist ../dist/assets/xapi
  • buildnpx parcel build --no-cache --no-source-maps src/index.ts && npm run shebang && npm run copy:public && npm run copy:presets
  • build:allnpm run clean && npm run build:assets && npm run asset:deduplicate && cp -r dist/assets/common/* dist/assets/pdf && npm run build && npm run minify
  • build:assetsnpm run clean && npm run asset:scorm1.2 && npm run asset:scorm2004 && npm run asset:xapi && npm run asset:web && npm run asset:indexeddb && npm run asset:pdf && npm run asset:capacitor && npm run asset:logo && npm run fix:file
  • build:debugnpx parcel build --target node --no-minify --log-level 5 src/index.ts
  • build:dockerdocker build -t liascript/exporter:latest .
  • cleanrm -rf dist/assets/*
  • copy:presetsnode scripts/copy-files.js presets
  • copy:publicnode scripts/copy-files.js
  • electron:buildnpm run build && electron-builder --config electron-builder.json
  • electron:build:allnpm run build && electron-builder --win --mac --linux --config electron-builder.json
  • electron:build:linuxnpm run build && electron-builder --linux --config electron-builder.json
  • electron:build:macnpm run build && electron-builder --mac --config electron-builder.json
  • electron:build:quicknpm run build && electron-builder --linux AppImage --x64 --config electron-builder.json
  • electron:build:winnpm run build && electron-builder --win --config electron-builder.json
  • electron:devNODE_ENV=development electron electron/main.js
  • electron:packnpm run build && electron-builder --dir --config electron-builder.json
  • fix:filefind dist/ -type f -name "*.js" -exec sed -i -r 's/\/\(https\?\|file\|ftp\|\(chrome\|moz\|safari-web\)-extension\):\\\/\\\/\[/\/(https?|file|ftp|(chrome|moz|safari-web)-extension):\\\/\\\/\\\/?[/g' {} +
  • minifyecho ''; printf '%-60s %12s %12s %12s %10s\n' 'File' 'Before' 'After' 'Reduced' 'Savings'; printf '%-60s %12s %12s %12s %10s\n' '----' '------' '-----' '-------' '-------'; find dist -name "*.js" -print0 | xargs -0 -P 4 -I {} sh -c 'before=$(wc -c < {}); minify {} > {}.min && after=$(wc -c < {}.min); if [ ${after} -lt ${before} ]; then mv {}.min {}; reduction=$((${before}-${after})); percent=$(awk "BEGIN {printf \"%.1f\", ${reduction}/${before}*100}"); printf "%-60s %12s %12s %12s %9s%%\n" "{}" "${before}" "${after}" "${reduction}" "${percent}"; else rm {}.min; printf "%-60s %12s %12s %12s %10s\n" "{}" "${before}" "${after}" "-" "0.0%"; fi'
  • run:iliascd docker/ilias && docker-compose up
  • …and 3 more.
Dependencies25
  • @fastify/multipart^8.1.0
  • @fastify/static^7.0.1
  • @lesjoursfr/html-to-epub^6.0.1
  • @liascript/simple-scorm-packager^0.3.0
  • @turbodocx/html-to-docx^1.20.1
  • archiver^7.0.1
  • electron-updater^6.8.9
  • epub-gen^0.1.0
  • fastify^4.26.0
  • fs-extra^11.3.3
  • isomorphic-git^1.38.4
  • jsonld^9.0.0
  • minimist^1.2.5
  • node-fetch^2.7.0
  • open^8.4.2
  • path^0.12.7
  • pino-pretty^13.0.0
  • puppeteer^24.34.0
  • simply-beautiful^1.0.1
  • temp^0.9.4
  • ts-node^10.9.2
  • typescript^5.9.3
  • unzipper^0.12.3
  • xhr2^0.2.1
  • yaml^2.8.2