Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Weekly downloads
- 103
- Versions published
- 5
- First published
- Aug 2019
- Publisher
- ahoyahoy
Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@purple/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@purple/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Large Javascript Payload: 2340090 bytes
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 70 · status changed
Evidence
Static findings
7 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Large Javascript Payload | package/dist/cjs/pdfmake-30d71e6d.js | 2340090 bytes | 10 |
| medium | Large Javascript Payload | package/dist/cjs/pt-widget-page.cjs.entry.js | 2993113 bytes | 10 |
| medium | Large Javascript Payload | package/dist/esm-es5/pdfmake-ce0694a7.js | 3583104 bytes | 10 |
| medium | Large Javascript Payload | package/dist/esm-es5/pt-widget-page.entry.js | 3000132 bytes | 10 |
| medium | Large Javascript Payload | package/dist/esm-es5/xlsx-332b129d.js | 2227967 bytes | 10 |
| medium | Large Javascript Payload | package/dist/esm/pdfmake-ce0694a7.js | 2340074 bytes | 10 |
| medium | Large Javascript Payload | package/dist/esm/pt-widget-page.entry.js | 2992726 bytes | 10 |
Manifest
Package metadata
Scripts14
addplop componentbuildnode --max_old_space_size=4096 ./node_modules/@stencil/core/bin/stencil buildplopplopprepublishnpm run buildstartnpm-run-all --parallel stencil storybookstencilstencil build --dev --watch --docsstory:testnpm run test:generate && npm run storystorybookstart-storybook -p 9001 -c .storybook -s wwwteststencil test --spectest:e2estencil test --e2etest:generatestencil test --spec --json --outputFile=jest-test-results.jsontest:generate:watchstencil test --spec --json --outputFile=jest-test-results.json --watchtest:snapshotstencil test --e2e --screenshottest:watchstencil test --spec --watch
Dependencies6
@amcharts/amcharts4^4.5.16@stencil/stylus^1.0.0@types/core-js^2.5.2axios^0.19.0core-js^3.2.1debounce-decorator^1.0.6