PkgRadar

Package evidence

@mondaydotcomorg/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
8
Versions published
93Mature · −50% score
First published
May 2025
Publisher
sergeyts4

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@mondaydotcomorg/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@mondaydotcomorg/[email protected]"],"fail_on":"review"}'
Publishersergeyts4
Artifact bytes374,619
Previous version1.0.93
Published2026-04-22T09:55:02.590Z
SHA-25696543184376008e3d47cc4a0e730bcff97ac257fb565b84c3e8d38478e0792b4

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
1.0.94Version
Status history (2 events)
  1. new → available · risk low · score 0 · status changed
  2. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts28
  • analyze-file-complexityTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' node --max-old-space-size=4096 -r ts-node/register src/scripts/shared-packages/analyze-file-complexity.ts
  • buildyarn build:cli && yarn build:client
  • build:clirollup -c rollup.config.js
  • build:clientvite build
  • build:shared-packagesrollup -c rollup.shared-packages.config.js
  • create-migration-boardTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/shared-packages/create-migration-board.ts
  • create-shared-selector-claudeTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/shared-selector/create-shared-selector-claude.ts
  • create-tasks-jsonTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/shared-packages/create-tasks-json.ts
  • create-vulcan-sliceTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/vulcan-slice/create-vulcan-slice.ts
  • create-vulcan-slice-claudeTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/vulcan-slice/create-vulcan-slice-claude.ts
  • create-vulcan-slice-tasksTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/vulcan-slice/create-tasks-json.ts
  • pick-locationsTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' node --max-old-space-size=4096 -r ts-node/register src/scripts/shared-packages/pick-locations-and-update-board.ts
  • prompt-scoreTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/prompt-scoring/cli.ts
  • prompt-score:findTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/prompt-scoring/cli.ts find
  • prompt-score:runTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/prompt-scoring/cli.ts run
  • shared-packages:notifyTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/shared-packages/notify.ts
  • shared-packages:single-fileTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' node --max-old-space-size=4096 -r ts-node/register src/scripts/shared-packages/shared-packages-single-file.ts
  • startTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' NODE_ENV=development ts-node src/cli.ts
  • start:prodnode dist/cli/cli.js
  • storybookstorybook dev -p 6006
  • testvitest
  • test-claude-codeTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/claude-code-test/test-claude-code-editing.ts
  • test-claude-simpleTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node test-simple-claude.ts
  • test:nowaitvitest --no-watch
  • upgrade-storybookTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/upgrade-storybook/upgrade-storybook.ts
  • vulcan-selectorTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/vulcan-selector/vulcan-selector.ts
  • vulcan-slice:notifyTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' ts-node src/scripts/vulcan-slice/notify.ts
  • vulcan-slice:single-fileTS_NODE_COMPILER_OPTIONS='{"module":"CommonJS"}' node --max-old-space-size=4096 -r ts-node/register src/scripts/vulcan-slice/vulcan-slice-single-file.ts
Dependencies18
  • @colyseus/core^0.16.17
  • @colyseus/schema^3.0.36
  • @colyseus/ws-transport^0.16.5
  • @google/generative-ai^0.24.1
  • @slack/web-api^7.9.2
  • chalk^4.1.2
  • colyseus^0.16.4
  • enquirer^2.4.1
  • express^5.1.0
  • glob^11.0.2
  • jscodeshift^17.3.0
  • lodash^4.17.21
  • lodash-es^4.17.21
  • openai^4.100.0
  • sinon^20.0.0
  • zod^3.25.13
  • zod-to-json-schema^3.24.5
  • zod-to-ts^1.2.0