PkgRadar

Package evidence

@maci-protocol/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
381Mature · −50% score
First published
Apr 2025
Publisher
errmac

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@maci-protocol/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@maci-protocol/[email protected]"],"fail_on":"review"}'
Publishererrmac
Artifact bytes99,252
Previous version0.0.0-ci.2130a8b
Published2026-03-30T17:28:17.318Z
SHA-256e4e204e6e8d82d129279875fb2c3b342efe25bcb716a58d71d54f4ae3d2b5343

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.0.0-ci.22106c8Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts29
  • buildtsc -p tsconfig.build.json
  • build-test-circuits-cts-node ./ts/compile.ts --cWitness
  • build-test-circuits-wasmts-node ./ts/compile.ts
  • circom:buildNODE_OPTIONS=--max-old-space-size=4096 circomkit compile
  • circom:setupNODE_OPTIONS=--max-old-space-size=4096 circomkit setup
  • generate-zkeysts-node ./ts/generateZkeys.ts
  • infoNODE_OPTIONS=--max-old-space-size=4096 ts-node ./ts/info.ts
  • mocha-testNODE_OPTIONS=--max-old-space-size=4096 ts-mocha --exit -g '^(?!.*\[fuzz\]).*$'
  • testpnpm run mocha-test ts/__tests__/*.test.ts
  • test:calculateTotalpnpm run mocha-test ts/__tests__/CalculateTotal.test.ts
  • test:ceremonyParamspnpm run mocha-test ts/__tests__/CeremonyParams.test.ts
  • test:fuzzNODE_OPTIONS=--max-old-space-size=4096 ts-mocha --exit -g '\[fuzz\]' ./ts/__tests__/*.test.ts
  • test:incrementalQuinaryTreepnpm run mocha-test ts/__tests__/IncrementalQuinaryTree.test.ts
  • test:isOnCurvepnpm run mocha-test ts/__tests__/IsOnCurve.test.ts
  • test:messageHasherpnpm run mocha-test ts/__tests__/MessageHasher.test.ts
  • test:messageProcessorFullpnpm run mocha-test ts/__tests__/MessageProcessorFull.test.ts
  • test:messageToCommandpnpm run mocha-test ts/__tests__/MessageToCommand.test.ts
  • test:messageValidatorpnpm run mocha-test ts/__tests__/MessageValidator.test.ts
  • test:messageValidatorFullpnpm run mocha-test ts/__tests__/MessageValidatorFull.test.ts
  • test:pollJoinedpnpm run mocha-test ts/__tests__/PollJoined.test.ts
  • test:pollJoiningpnpm run mocha-test ts/__tests__/PollJoining.test.ts
  • test:poseidonHasherpnpm run mocha-test ts/__tests__/PoseidonHasher.test.ts
  • test:privateToPublicKeypnpm run mocha-test ts/__tests__/PrivateToPublicKey.test.ts
  • test:slAndBallotTransformerpnpm run mocha-test ts/__tests__/StateLeafAndBallotTransformer.test.ts
  • test:slAndBallotTransformerFullpnpm run mocha-test ts/__tests__/StateLeafAndBallotTransformerFull.test.ts
  • test:verifySignaturepnpm run mocha-test ts/__tests__/VerifySignature.test.ts
  • test:voteTallypnpm run mocha-test ts/__tests__/VoteTally.test.ts
  • typestsc -p tsconfig.json --noEmit
  • watchtsc --watch
Dependencies7
  • @maci-protocol/core0.0.0-ci.22106c8
  • @maci-protocol/crypto0.0.0-ci.22106c8
  • @maci-protocol/domainobjs0.0.0-ci.22106c8
  • @maci-protocol/sdk0.0.0-ci.22106c8
  • @zk-kit/circuits^0.4.0
  • circomkit^0.3.4
  • circomlib^2.0.5