PkgRadar

Package evidence

@tidepool/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
816Mature · −50% score
First published
Jul 2016
Publisher
tidepool-robot

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@tidepool/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@tidepool/[email protected]"],"fail_on":"review"}'
Publishertidepool-robot
Artifact bytes2,364,205
Previous version1.56.0-rc.8
Published2026-06-02T20:34:01.618Z
SHA-2561253edbc096f08dac98242d0aef76512d01d6648fd26d7d940b2a1b5afefe75e

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
1.56.0-rc.9Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts15
  • apidocsyarn jsdoc2md
  • browser-testsNODE_ENV=test yarn karma start --browsers Chrome
  • buildNODE_ENV=production npm run clean && NODE_ENV=production yarn webpack --config package.config.js
  • build-devnpm run clean && NODE_ENV=development yarn webpack --config package.config.js --progress
  • build-docs./update-gh-pages.sh
  • build-storybooksyarn build-storybook -c storybook -o web/stories && yarn build-storybook -c storybookDatatypes -o web/diabetes-data-stories
  • cleanNODE_ENV=production yarn rimraf ./dist/*
  • lintNODE_ENV=test yarn eslint src/ stories/ storiesDatatypes/ test/ *.js
  • prepublishOnlyNODE_ENV=production yarn rimraf ./node_modules && yarn install --immutable && npm test && NODE_ENV=production npm run build
  • pretestNODE_ENV=test npm run lint
  • startNODE_ENV=development yarn webpack --config package.config.js --watch --progress
  • storiesNODE_OPTIONS="--max_old_space_size=4096" NODE_ENV=development yarn sb dev -c storybook -p 8083 --ci
  • testTZ=UTC NODE_ENV=test yarn jest --verbose
  • test-watchTZ=UTC NODE_ENV=test yarn jest --watch
  • typestoriesNODE_ENV=development yarn sb dev -c storybookDatatypes -p 8082 --ci
Dependencies51
  • bluebird3.7.2
  • bows1.7.2
  • browserify-zlib0.2.0
  • buffer6.0.3
  • classnames2.3.2
  • crossfilter21.5.4
  • d3-array3.2.4
  • d3-format3.1.0
  • d3-scale4.0.2
  • d3-shape3.2.0
  • d3-time3.1.0
  • d3-time-format4.1.0
  • emotion11.0.0
  • events3.3.0
  • fastest-validator0.6.10
  • gsap3.12.2
  • i18next23.6.0
  • intl1.2.5
  • intl-pluralrules2.0.1
  • lodash4.17.21
  • memorystream0.3.1
  • moment2.29.4
  • moment-timezone0.5.43
  • parse-svg-path0.1.2
  • pdfkit0.15.0
  • process0.11.10
  • prop-types15.8.1
  • react16.14.0
  • react-clipboard.js2.0.16
  • react-collapse5.1.1
  • …and 21 more.