PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
258Established · −30% score
First published
Aug 2025
Publisher
ahmadawais

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisherahmadawais
Artifact bytes495,132
Previous version0.30.4
Published2026-06-01T19:48:52.904Z
SHA-256be65f7264a0bb5eb3b1324755ddec55c712668a2fd2bed5abc5121fa0afa7ce6

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.31.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts27
  • benchmarktsx benchmarks/runner.ts
  • benchmark:comparetsx benchmarks/compare.ts
  • buildtsup
  • build:balancedtsup --config tsup.config.balanced.ts
  • build:bunbun run build.bun.js
  • build:bun:exebun build ./src/index.ts --compile --outfile dist/command-code
  • build:obfuscatedbash ../../scripts/build-ext.sh && tsup --config tsup.config.obfuscated.ts
  • devtsup --watch src
  • link:localln -sf $(pwd)/dist/index.mjs /usr/local/bin/dmd && chmod +x /usr/local/bin/dmd
  • prebuildtest -f vsix/commandcode-vscode.vsix || bash ../../scripts/build-ext.sh
  • publish:prodpnpm run build:obfuscated && npm publish --access public
  • startnode dist/index.mjs
  • testbash scripts/run-tests-all.sh
  • test:allbash scripts/run-tests-all.sh
  • test:cleanupbash scripts/cleanup-test-processes.sh
  • test:cleanup:drybash scripts/cleanup-test-processes.sh --dry
  • test:coveragevitest run --coverage
  • test:e2epnpm test:integration && pnpm test:non-interactive
  • test:integrationvitest run --config tests/integration/vitest.config.ts
  • test:integration:debugDEBUG_HANGING=true vitest run --config tests/integration/vitest.config.ts
  • test:integration:verboseVERBOSE=true KEEP_OUTPUT=true vitest run --config tests/integration/vitest.config.ts
  • test:non-interactivevitest run --config tests/non-interactive/vitest.config.ts
  • test:non-interactive:verboseKEEP_OUTPUT=true vitest run --config tests/non-interactive/vitest.config.ts
  • test:non-interactive:watchvitest --config tests/non-interactive/vitest.config.ts
  • test:watchvitest
  • typechecktsc --noEmit
  • unlink:localrm -f /usr/local/bin/dmd
Dependencies50
  • @ai-sdk/anthropic^3.0.77
  • @ai-sdk/openai^3.0.41
  • @ai-sdk/openai-compatible^2.0.35
  • @ai-sdk/provider^3.0.8
  • @ai-sdk/provider-utils^4.0.19
  • @clack/prompts^1.0.1
  • @crosscopy/clipboard^0.2.8
  • @opentelemetry/api^1.9.0
  • @opentelemetry/exporter-trace-otlp-http^0.218.0
  • @opentelemetry/resources^2.0.0
  • @opentelemetry/sdk-node^0.218.0
  • @opentelemetry/sdk-trace-node^2.0.0
  • @opentelemetry/semantic-conventions^1.30.0
  • @sindresorhus/slugify^2.2.1
  • ai^6.0.116
  • ansi-escapes^7.3.0
  • chalk^5.5.0
  • commander^14.0.0
  • dedent^1.6.0
  • diff^8.0.2
  • dotenv^17.2.1
  • fast-wrap-ansi^0.2.0
  • figures^6.1.0
  • giget^3.1.2
  • glob^13.0.5
  • gray-matter^4.0.3
  • ignore^7.0.5
  • ink6.6.0
  • ink-select-input^6.2.0
  • ink-spinner^5.0.0
  • …and 20 more.