PkgRadar

Package evidence

@medicine-wheel/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
14
First published
May 2026
Publisher
jgi

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@medicine-wheel/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@medicine-wheel/[email protected]"],"fail_on":"review"}'
Publisherjgi
Artifact bytes77,408
Previous version0.4.6
Published2026-06-15T16:07:45.142Z
SHA-256314b2e9afa20f7453e34d1e0a27fd58d275c372bba1ab5e9c591b18522354904

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.4.7Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts29
  • buildnext build
  • build:clitsc -p tsconfig.cli.json && chmod +x dist/cli/mw.js dist/cli/mwsrv.js
  • build:packagesnpm run build -w src/ontology-core && npm run build --workspaces --if-present
  • clean:packagesnpm run clean --workspaces --if-present
  • devnext dev -p 3940
  • docker:builddocker build -t jgwill/medicine-wheel:app .
  • docker:build-pushnpm run docker:build && npm run docker:push
  • docker:pushdocker push jgwill/medicine-wheel:app
  • lintnext lint
  • prebuildnpm run build:packages
  • predevnpm run build:packages
  • prepublishOnlynpm run clean:packages && npm run build:packages && npm run build:cli
  • publish:allnpm run prepublishOnly && node scripts/publish-workspaces.mjs && npm publish --access public --ignore-scripts
  • publish:drynpm run prepublishOnly && node scripts/publish-workspaces.mjs --dry-run && npm publish --access public --dry-run --ignore-scripts
  • publish:mcpnpm publish --workspace mcp --access public
  • publish:packagesnpm run prepublishOnly && node scripts/publish-workspaces.mjs
  • publish:rootnpm publish --access public
  • release:commitnode scripts/release-commit.mjs
  • release:majornpm run version:major && npm run publish:all && npm run release:commit
  • release:minornpm run version:minor && npm run publish:all && npm run release:commit
  • release:patchnpm run version:patch && npm run publish:all && npm run release:commit
  • startnext start -p 3940
  • sync:versionsnode scripts/sync-versions.mjs
  • testvitest run
  • test:watchvitest
  • version:majornode scripts/bump-versions.mjs major && node scripts/sync-versions.mjs && shx rm -rf node_modules src/*/node_modules package-lock.json && npm install --legacy-peer-deps
  • version:minornode scripts/bump-versions.mjs minor && node scripts/sync-versions.mjs && shx rm -rf node_modules src/*/node_modules package-lock.json && npm install --legacy-peer-deps
  • version:patchnode scripts/bump-versions.mjs patch && node scripts/sync-versions.mjs && shx rm -rf node_modules src/*/node_modules package-lock.json && npm install --legacy-peer-deps
  • version:setnpm version -ws && node scripts/sync-versions.mjs
Dependencies29
  • @medicine-wheel/ceremony-protocol^0.4.7
  • @medicine-wheel/community-review^0.4.7
  • @medicine-wheel/consent-lifecycle^0.4.7
  • @medicine-wheel/data-store^0.4.7
  • @medicine-wheel/data-store-postgres^0.4.7
  • @medicine-wheel/fire-keeper^0.4.7
  • @medicine-wheel/graph-viz^0.4.7
  • @medicine-wheel/importance-unit^0.4.7
  • @medicine-wheel/mcp^4.4.5
  • @medicine-wheel/narrative-engine^0.4.7
  • @medicine-wheel/ontology-core^0.4.7
  • @medicine-wheel/prompt-decomposition^0.4.7
  • @medicine-wheel/relational-index^0.4.7
  • @medicine-wheel/relational-query^0.4.7
  • @medicine-wheel/session-reader^0.4.7
  • @medicine-wheel/storage-provider^0.4.7
  • @medicine-wheel/transformation-tracker^0.4.7
  • @medicine-wheel/ui-components^0.4.7
  • @neondatabase/serverless^0.10.0
  • @xyflow/react^12.3.0
  • clsx^2.1.1
  • lucide-react^0.475.0
  • next^15.3.0
  • next-themes^0.4.6
  • react^19.0.0
  • react-dom^19.0.0
  • recharts^2.15.4
  • sonner^1.7.0
  • tailwind-merge^3.0.2