PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
62Mature · −50% score
First published
Apr 2015
Publisher
silkalns

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publishersilkalns
Artifact bytes4,402,348
Previous version4.0.0-rc7
Published2026-05-19T14:33:25.847Z
SHA-256c8177f10d0c6eca382807ec53ad20784758b657107249b05b9737118bfadb9fd

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
4.0.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts33
  • assetsnode src/config/assets.config.mjs
  • buildnpm-run-all clean compile
  • bundlewatchbundlewatch --config .bundlewatch.config.json
  • cleanrimraf dist
  • compilenpm-run-all css js assets copy-assets docs-compile docs-format flatten-build
  • copy-assetsrimraf src/html/public && shx mkdir -p src/html/public && shx cp -r dist/css dist/js dist/assets src/html/public/
  • cssnpm-run-all css-compile css-prefix css-rtl css-minify
  • css-compilesass --style expanded --load-path="node_modules" --source-map --embed-sources --no-error-css --quiet src/scss/:dist/css/
  • css-lintstylelint "src/scss/**/*.scss" --cache --cache-location .cache/.stylelintcache --rd
  • css-minifynpm-run-all --aggregate-output --parallel css-minify-*
  • css-minify-maincleancss -O1 --format breakWith=lf --with-rebase --source-map --source-map-inline-sources --output dist/css/ --batch --batch-suffix ".min" "dist/css/*.css" "!dist/css/*.min.css" "!dist/css/*rtl*.css"
  • css-minify-rtlcleancss -O1 --format breakWith=lf --with-rebase --source-map --source-map-inline-sources --output dist/css/ --batch --batch-suffix ".min" "dist/css/*rtl.css" "!dist/css/*.min.css"
  • css-prefixpostcss --config src/config/postcss.config.mjs --replace "dist/css/*.css" "!dist/css/*.rtl*.css" "!dist/css/*.min.css"
  • css-rtlcross-env NODE_ENV=RTL postcss --config src/config/postcss.config.mjs --dir "dist/css" --ext ".rtl.css" "dist/css/*.css" "!dist/css/*.min.css" "!dist/css/*.rtl.css"
  • devnpm-run-all --parallel watch docs-serve
  • docs-compilenpm run copy-assets && astro --config src/config/astro.config.mjs build
  • docs-formatprettier --write "dist/**/*.html"
  • docs-lintastro --config src/config/astro.config.mjs check
  • docs-servenpm run copy-assets && astro --config src/config/astro.config.mjs dev --open --port 3000
  • flatten-buildshx cp -r dist/html/* dist/ && shx rm -rf dist/html && shx rm -rf dist/.astro && shx mkdir -p dist/docs && shx mv dist/docs.html dist/docs/index.html
  • jsnpm-run-all js-compile js-minify
  • js-compilerollup --config src/config/rollup.config.js --sourcemap
  • js-linteslint --format=stylish .
  • js-minifyterser --compress passes=2 --mangle --comments "/^!/" --source-map "content=dist/js/adminlte.js.map,includeSources,url=adminlte.min.js.map" --output dist/js/adminlte.min.js dist/js/adminlte.js
  • lintnpm-run-all --aggregate-output --continue-on-error --parallel js-lint css-lint docs-lint lockfile-lint
  • lockfile-lintlockfile-lint --allowed-hosts npm --allowed-schemes https: --empty-hostname false --type npm --path package-lock.json
  • productionnpm-run-all clean lint compile bundlewatch
  • startnpm run dev
  • watchconcurrently "npm:watch-*"
  • watch-assetsnodemon --watch src/assets/ --exec "npm run assets"
  • …and 3 more.