PkgRadar

Package evidence

@mkterswingman/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
1
First published
Jun 2026
Publisher
wymworkspace

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@mkterswingman/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@mkterswingman/[email protected]"],"fail_on":"review"}'
Publisherwymworkspace
Artifact bytes37,366
Previous versionnone
Published2026-06-10T03:26:28.323Z
SHA-2560ff56a8ea61725315c9aedc2b93a80820de986300a4d539d5c415911a7e03346

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.0.2Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts19
  • buildrm -rf dist && tsc && chmod +x dist/cli.js
  • release:publishnode build/publish-release.mjs
  • runtime:assemblenode build/assemble-current-runtime.mjs
  • runtime:assemble-currentnode build/assemble-current-runtime.mjs
  • runtime:build-transcribe-currentnode build/build-transcription-runner.mjs
  • runtime:bundle-setupnode build/create-setup-runtime-bundle.mjs
  • runtime:download-modelnode build/download-faster-whisper-model.mjs
  • runtime:prepare-ffmpegnode build/prepare-ffmpeg-runtime-inputs.mjs
  • runtime:select-btbn-ffmpegnode build/select-btbn-ffmpeg-runtime.mjs
  • runtime:vendor-darwin-homebrewnode build/vendor-darwin-homebrew-runtime.mjs
  • smokenpm run build && node dist/cli.js --help >/dev/null && node dist/cli.js version >/dev/null
  • testnpm run build && node --test tests/*.test.mjs
  • typechecktsc --noEmit
  • verify:public-installnpm run build && node build/verify-public-install.mjs
  • verify:public-runtime-installnpm run build && node build/verify-public-runtime-install.mjs
  • verify:registry-installnode build/verify-registry-install.mjs
  • verify:release-readinessnpm run build && node build/verify-release-readiness.mjs
  • verify:runtime-currentnode build/verify-runtime-packages.mjs --current
  • verify:runtime-packagesnode build/verify-runtime-packages.mjs
Dependencies2
  • @mkterswingman/5mghost-auth^0.0.1
  • @mkterswingman/5mghost-telemetry^0.0.1