Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published: 45
First published: Apr 2026
Publisher: foodismai

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'

Publisherfoodismai

Artifact bytes758,553

Previous version0.1.47

Published2026-06-14T17:36:25.550Z

SHA-256633fad70102958605d9990e4ba213745e97c76b039eeda0882901fe7d6bdc545

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

3d agoLast checked

lowRisk

0Score

0.1.48Version

Status history (1 event)

new → available3d ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts7

buildtsdown && node scripts/copy-route-assets.mjs
checkpublint && attw --pack --ignore-rules=cjs-resolves-to-esm --ignore-rules=no-resolution --ignore-rules=internal-resolution-error
devtsdown --watch
testvitest
test:integrationvitest run --config vitest.integration.config.ts
test:smokevitest run --config vitest.smoke.config.ts
typechecktsgo --noEmit

Dependencies39

@cloudflare/kumo^2.3.0
@dineway-ai/admin^0.1.17
@dineway-ai/auth^0.1.17
@dineway-ai/gutenberg-to-portable-text^0.1.15
@floating-ui/react^0.27.16
@modelcontextprotocol/sdk^1.26.0
@portabletext/toolkit^5.0.1
@tiptap/core^3.20.0
@tiptap/extension-code-block^3.20.0
@tiptap/extension-focus^3.20.0
@tiptap/extension-image^3.20.0
@tiptap/extension-link^3.20.0
@tiptap/extension-placeholder^3.20.0
@tiptap/extension-text-align^3.20.0
@tiptap/extension-typography^3.20.0
@tiptap/extension-underline^3.20.0
@tiptap/react^3.20.0
@tiptap/starter-kit^3.20.0
@tiptap/suggestion^3.20.0
@unpic/placeholder^0.1.2
arctic^3.7.0
astro-portabletext^0.11.0
better-sqlite3^12.8.0
blurhash^2.0.5
citty^0.1.6
consola^3.4.2
croner^10.0.1
image-size^2.0.2
jose^6.1.3
jpeg-js^0.4.4
…and 9 more.

Optional dependencies4

@aws-sdk/client-s3^3.1049.0
@aws-sdk/s3-request-presigner^3.1049.0
@libsql/kysely-libsql^0.4.0
pg^8.0.0