PkgRadar

Package evidence

@pattern-stack/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
61
Versions published
28Mature · −50% score
First published
Jun 2025
Publisher
dugsnodes

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@pattern-stack/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@pattern-stack/[email protected]"],"fail_on":"review"}'
Publisherdugsnodes
Artifact bytes995,855
Previous version0.2.0-alpha.19
Published2026-06-07T22:29:13.419Z
SHA-256a4e97828f56ddb53c52b72e168e82f6e7af92a64228f417fe5595d4395ae52aa

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.2.0-alpha.20Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts34
  • buildtsc -b && vite build
  • build:clitsc cli/**/*.ts --module node16 --moduleResolution node16 --allowSyntheticDefaultImports --esModuleInterop
  • build:libnpm run clean && vite build --mode library && npm run build:types
  • build:typestsc --project tsconfig.lib.json
  • cleanrm -rf dist
  • clean:allnpm run clean && rm -rf .playwright-mcp coverage node_modules/.cache .vite .turbo && find . -name '*.tgz' -delete && find . -name '.DS_Store' -delete
  • clean:temprm -rf .playwright-mcp coverage .vite .turbo && find . -name '*.tgz' -delete && find . -name '.DS_Store' -delete
  • devvite
  • generatesync-patterns generate ./openapi.json --output ./src/generated --entities --collections
  • generate:hooksnpx tsx cli/index.ts generate hooks
  • linteslint .
  • lint:design-systemeslint . --ext .tsx,.ts --config eslint.config.js
  • lint:fixeslint . --fix
  • lint:tokensnode scripts/check-design-tokens.mjs
  • package:checknpm pack --dry-run
  • package:sizenpm pack --dry-run 2>&1 | grep -E 'npm notice [0-9]+\.[0-9]+[kM]B'
  • package:testnpm run build:lib && npm pack && tar -tf *.tgz | head -20 && rm *.tgz
  • package:validatenpm run package:check && npm run package:size && echo '✅ Package validation passed!'
  • pre-commitnpm run style:check && npm run test:run && npm run build
  • prepublishOnlynpm run clean && npm run build:lib
  • previewvite preview
  • setup:autonode scripts/setup-auto.js
  • setup:interactivenode scripts/setup-interactive.js
  • style:checknpm run lint:design-system
  • style:fixnpm run lint:fix && npm run style:check
  • testvitest
  • test:atomsvitest run src/__tests__/atoms
  • test:coveragevitest run --coverage
  • test:featuresvitest run src/__tests__/features
  • test:moleculesvitest run src/__tests__/molecules
  • …and 4 more.
Dependencies27
  • @hookform/resolvers^5.0.1
  • @radix-ui/react-avatar^1.1.10
  • @radix-ui/react-dialog^1.1.15
  • @radix-ui/react-dropdown-menu^2.1.15
  • @radix-ui/react-label^2.1.7
  • @radix-ui/react-slot^1.2.3
  • @tanstack/db^0.5.11
  • @tanstack/electric-db-collection^0.2.11
  • @tanstack/query-db-collection^1.0.6
  • @tanstack/query-sync-storage-persister^5.90.14
  • @tanstack/react-db^0.1.55
  • @tanstack/react-query^5.77.2
  • @tanstack/react-query-devtools^5.79.0
  • @tanstack/react-query-persist-client^5.90.14
  • axios^1.9.0
  • class-variance-authority^0.7.1
  • clsx^2.1.1
  • commander^14.0.0
  • lucide-react^0.511.0
  • mapbox-gl^3.1.2
  • openapi-types^12.1.3
  • react-hook-form^7.56.4
  • react-map-gl^7.1.7
  • react-router-dom^7.6.1
  • tailwind-merge^3.3.0
  • tailwindcss-animate^1.0.7
  • zod^3.25.32