Package evidence

@owlmeans/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 627
Versions published: 12Established · −30% score
First published: Sep 2025
Publisher: vashigor

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@owlmeans/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@owlmeans/[email protected]"],"fail_on":"review"}'

Publishervashigor

Artifact bytes48,575

Previous version0.1.10

Published2026-06-17T10:43:05.674Z

SHA-25622e1091a58e55e766e71cd3581d9616b6af3c729417bbd825b471b9080f5ea47

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

26h agoLast checked

lowRisk

0Score

0.1.11Version

Status history (1 event)

new → available26h ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts4

buildtsc -b
devsleep 384 && nodemon -e ts,tsx,json --watch src --exec "tsc -p ./tsconfig.json"
testbun test ./tests
watchtsc -b -w --preserveWatchOutput --pretty

Dependencies28

@hookform/resolvers^3.9.0
@owlmeans/api-config-client^0.1.11
@owlmeans/auth^0.1.11
@owlmeans/auth-common^0.1.11
@owlmeans/basic-envelope^0.1.11
@owlmeans/client^0.1.11
@owlmeans/client-auth^0.1.11
@owlmeans/client-config^0.1.11
@owlmeans/client-context^0.1.11
@owlmeans/client-entrypoint^0.1.11
@owlmeans/client-flow^0.1.11
@owlmeans/client-i18n^0.1.11
@owlmeans/client-panel^0.1.11
@owlmeans/client-route^0.1.11
@owlmeans/config^0.1.11
@owlmeans/context^0.1.11
@owlmeans/entrypoint^0.1.11
@owlmeans/error^0.1.11
@owlmeans/flow^0.1.11
@owlmeans/i18n^0.1.11
@owlmeans/route^0.1.11
@owlmeans/web-client^0.1.11
@owlmeans/web-db^0.1.11
@owlmeans/web-flow^0.1.11
@owlmeans/web-router^0.1.11
i18next-browser-languagedetector^8.0.0
qrcode.react^4.2.0
react-google-recaptcha^3.1.0