Package evidence

@lukso/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published: 34Mature · −50% score
First published: Jan 2022
Publisher: lukso-network

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@lukso/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@lukso/[email protected]"],"fail_on":"review"}'

Publisherlukso-network

Artifact bytes417,115

Previous version0.16.4

Published2025-06-19T13:57:38.813Z

SHA-256038e9870f205bf83243af76d68a0afa9ff0f32fed8751f203e401632abec447a

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

10h agoLast checked

lowRisk

0Score

0.16.5Version

Status history (1 event)

new → available10h ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts14

buildhardhat compile --show-stack-traces
build:docshardhat dodoc && prettier -w ./docs && bash dodoc/postProcessingContracts.sh && dodoc/postProcessingLibraries.sh
build:foundryforge build
build:jsunbuild
build:packagehardhat prepare-package
build:typeswagmi generate
cleanhardhat clean && rm -Rf dist/ cache/ node_modules/ .turbo/ types/ typechain/ build/ artifacts/ abi.ts
formatprettier --write .
linteslint . --ext .ts,.js
lint:soliditysolhint 'contracts/**/*.sol' && prettier --check 'contracts/**/*.sol'
testhardhat test --no-compile tests/**/*.test.ts tests/LSP7DigitalAsset/**/*.ts tests/LSP8IdentifiableDigitalAsset/**/*.ts
test:benchmarkhardhat test --no-compile tests/Benchmark.test.ts
test:coveragehardhat coverage
test:foundryFOUNDRY_PROFILE=lsp_smart_contracts forge test -vvvv

Dependencies23

@lukso/lsp0-contracts~0.15.0
@lukso/lsp1-contracts~0.15.0
@lukso/lsp10-contracts~0.15.0
@lukso/lsp11-contracts~0.1.0
@lukso/lsp12-contracts~0.15.0
@lukso/lsp14-contracts~0.15.0
@lukso/lsp16-contracts~0.15.0
@lukso/lsp17-contracts~0.16.0
@lukso/lsp17contractextension-contracts~0.16.2
@lukso/lsp1delegate-contracts~0.15.0
@lukso/lsp2-contracts~0.15.0
@lukso/lsp20-contracts~0.15.0
@lukso/lsp23-contracts~0.15.0
@lukso/lsp25-contracts~0.15.0
@lukso/lsp26-contracts~0.1.0
@lukso/lsp3-contracts~0.16.0
@lukso/lsp4-contracts~0.16.2
@lukso/lsp5-contracts~0.15.0
@lukso/lsp6-contracts~0.15.0
@lukso/lsp7-contracts~0.16.3
@lukso/lsp8-contracts~0.16.2
@lukso/lsp9-contracts~0.15.0
@lukso/universalprofile-contracts~0.15.0