PkgRadar

Package evidence

@stainless-code/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
34
First published
Apr 2026
Publisher
sutusebastian

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@stainless-code/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@stainless-code/[email protected]"],"fail_on":"review"}'
Publishersutusebastian
Artifact bytes361,947
Previous version0.10.1
Published2026-06-11T10:42:55.150Z
SHA-2567a51cde937039f10656488b4bc76679537ba4abb85ef249969ec2b109a044fc8

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.11.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts31
  • benchmarkbun src/benchmark.ts
  • benchmark:querybun scripts/benchmark-query-output.ts
  • buildtsdown
  • changesetchangeset
  • checkbun run build && bun run --parallel format:check lint:ci test test:scripts typecheck && bun run test:golden && bun run test:agent-eval
  • check-updatesbun update -i --latest
  • check:perf-baselinebun scripts/check-perf-baseline.ts
  • check:perf-baseline:updatebun scripts/check-perf-baseline.ts --update
  • cleangit clean -xdf -e .env -e docs/research/scratch
  • devbun src/index.ts
  • fixbun run lint:fix && bun run format
  • formatoxfmt
  • format:checkoxfmt --check --no-error-on-unmatched-pattern
  • lintoxlint --no-error-on-unmatched-pattern
  • lint-stagedlint-staged
  • lint:cioxlint --quiet
  • lint:fixoxlint --fix
  • packbun run build && npm pack
  • preparehusky || true
  • prepublishOnlybun run check
  • qa:externalbun scripts/qa-external-repo.ts
  • releasechangeset publish
  • testbun test ./src
  • test:agent-evalbun test scripts/agent-eval
  • test:cibun run test:coverage
  • test:coveragebun test --coverage ./src
  • test:goldenbun scripts/query-golden.ts
  • test:golden:externalbun scripts/query-golden.ts --corpus external
  • test:scriptsbash -c 'files=$(find scripts -name "*.test.mjs"); if [ -z "$files" ]; then echo "no scripts test files found" >&2; exit 1; fi; exec bun test $files'
  • typechecktsgo --noEmit
  • …and 1 more.
Dependencies10
  • @clack/prompts1.5.1
  • @modelcontextprotocol/sdk1.29.0
  • better-sqlite312.10.0
  • chokidar5.0.0
  • lightningcss1.32.0
  • oxc-parser0.134.0
  • oxc-resolver11.20.0
  • package-manager-detector1.6.0
  • tinyglobby0.2.17
  • zod4.4.3