PkgRadar

Package evidence

@zerocat/[email protected]

Large Javascript Payload: 2570814 bytes

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
4
Versions published
1
First published
Jun 2024
Publisher
wydev

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@zerocat/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@zerocat/[email protected]"],"fail_on":"review"}'
Publisherwydev
Artifact bytes1,283,932
Previous versionnone
Published2024-06-28T09:02:55.284Z
SHA-256e4eb551b2351b2e522997bf7b0253ccb021acd50ed899665316c90c4651a8da5

Why flagged

What the scanner saw

Large Javascript Payload: 2570814 bytes

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
3.1001.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

1 static · 0 from release diff · showing high-signal first.

No high-signal findings — see all findings below.

Show all 1 findings (low-signal and informational)
SeverityKindPathDetailPoints
lowLarge Javascript Payloadpackage/locales/editor-msgs.js2570814 bytes0

Manifest

Package metadata

Scripts28
  • buildnpm run clean && npm run build:data && webpack --progress --colors --bail
  • build:datababel-node scripts/build-data
  • cleanrimraf ./dist ./locales && mkdirp dist locales
  • lintnpm run lint:js && npm run lint:json
  • lint:jseslint . --ext .js
  • lint:jsonjshint -e .json www editor/blocks editor/extensions editor/interface editor/paint-editor
  • pull:blocksbabel-node scripts/tx-pull-editor scratch-editor blocks ./editor/blocks/
  • pull:editornpm run pull:blocks && npm run pull:extensions && npm run pull:paint && npm run pull:interface
  • pull:extensionsbabel-node scripts/tx-pull-editor scratch-editor extensions ./editor/extensions/
  • pull:helpnpm run pull:help:names && npm run pull:help:articles
  • pull:help:articles./scripts/tx-pull-help-articles.js
  • pull:help:names./scripts/tx-pull-help-names.js
  • pull:interfacebabel-node scripts/tx-pull-editor scratch-editor interface ./editor/interface/
  • pull:paintbabel-node scripts/tx-pull-editor scratch-editor paint-editor ./editor/paint-editor/
  • pull:wwwbabel-node scripts/tx-pull-www ./www
  • push:help./scripts/tx-push-help.js
  • sync:helpnpm run push:help && npm run pull:help
  • testnpm run lint:js && npm run validate:editor && npm run validate:www && npm run build && npm run lint:json
  • tw:publish./scripts/tw-publish.sh
  • tw:pullbabel-node scripts/tw-pull
  • tw:pushbabel-node scripts/tw-push
  • updatescripts/update-translations.sh
  • validate:blocksbabel-node scripts/validate-translations ./editor/blocks/
  • validate:editornpm run validate:blocks && npm run validate:extensions && npm run validate:interface && npm run validate:paint
  • validate:extensionsbabel-node scripts/validate-translations ./editor/extensions/ && babel-node scripts/validate-extension-inputs
  • validate:interfacebabel-node scripts/validate-translations ./editor/interface/
  • validate:paintbabel-node scripts/validate-translations ./editor/paint-editor/
  • validate:wwwbabel-node scripts/validate-www ./www
Dependencies6
  • @babel/cli^7.1.2
  • @babel/core^7.1.2
  • @transifex/api4.3.0
  • babel-plugin-react-intl^3.0.1
  • download^8.0.0
  • transifex1.6.6