Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Weekly downloads
- 261
- Versions published
- 6
- First published
- Mar 2026
- Publisher
- maxalexweber
Recommended action
Looks clean — keep monitoringNo high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@odatano/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@odatano/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
No high-signal static finding in the saved report.
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk low · score 0 · status changed
Evidence
Static findings
No findings stored for this release.
Manifest
Package metadata
Scripts31
buildnpm run build:pluginbuild:pluginnpm run cds:types && tsc -p tsconfig.build.jsonbuild:typesnpm run cds:typescds:servecds-servecds:typescds-typer "*" --outputDirectory @cds-modelscds:watchcds watchcleannode scripts/clean-build-artifacts.jsdeploycds deploy --to sqlite:db/midnight.dbdevnode scripts/dev.mjsdev:default-heapnpm run cds:watchintegration:attestation-vaultnode scripts/integration-test-attestation-vault.mjsintegration:contract-registrynode scripts/integration-test-contract-registry.mjsintegration:providersnode scripts/integration-test-providers.mjsintegration:wallet-facadenode scripts/integration-test-wallet-facade.mjsintegration:wallet-keysnode scripts/integration-test-wallet-keys.mjslinteslint .predicate:e2enode --env-file=.env scripts/run-predicate-e2e.mjsprepacknpm run build:pluginprepublishOnlynpm run typecheck && npm test && npm run build:pluginprestartnpm run buildpretestnpm run buildservenpm run cds:serveserve:syncnode scripts/serve.mjssmoke:sdknode scripts/smoke-test-sdk.mjsstartnpm run servesync:probenode scripts/probe-indexer.mjssync:startnode --env-file=.env scripts/start-wallet-sync.mjst15node --env-file=.env scripts/run-t15.mjstestjest --coverage --runInBandtest:unitnpm run build && jest --testPathPattern=test/unit --runInBand- …and 1 more.
Dependencies21
@midnight-ntwrk/compact-js^2.5.0@midnight-ntwrk/compact-runtime^0.16.0@midnight-ntwrk/ledger-v8^8.1.0@midnight-ntwrk/midnight-js-contracts^4.0.4@midnight-ntwrk/midnight-js-http-client-proof-provider^4.0.4@midnight-ntwrk/midnight-js-indexer-public-data-provider^4.0.4@midnight-ntwrk/midnight-js-level-private-state-provider^4.0.4@midnight-ntwrk/midnight-js-network-id^4.0.4@midnight-ntwrk/midnight-js-node-zk-config-provider^4.0.4@midnight-ntwrk/wallet-sdk-abstractions^2.1.0@midnight-ntwrk/wallet-sdk-address-format^3.1.1@midnight-ntwrk/wallet-sdk-dust-wallet^4.0.0@midnight-ntwrk/wallet-sdk-facade^4.0.0@midnight-ntwrk/wallet-sdk-hd^3.0.2@midnight-ntwrk/wallet-sdk-shielded^3.0.0@midnight-ntwrk/wallet-sdk-unshielded-wallet^3.0.0@noble/hashes^1.8.0bip39^3.1.0express^4undici^8.3.0ws^8