PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
79Mature · −50% score
First published
Aug 2022
Publisher
0xmica

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisher0xmica
Artifact bytes1,245,259
Previous version8.0.4
Published2025-07-03T08:49:39.084Z
SHA-25618e1cdf85d7dc930f90de1be0b66c0632709ea628122e23cb961c28b5662ccac

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
8.1.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts41
  • cleanhardhat clean
  • compilehardhat compile --config hardhat.node.config.ts
  • compile:sizehardhat size-contracts
  • coveragecross-env SOLIDITY_COVERAGE=true HARDHAT_DEPLOY_FIXTURE=true hardhat coverage --solcoverjs ./.solcover.js --testfiles './test/**/*.test.ts'
  • deployhardhat deploy
  • deploy:base_mainnethardhat deploy --network base_mainnet
  • deploy:base_sepolia_devhardhat deploy --network base_sepolia_dev
  • deploy:base_sepolia_stable_dev_prodhardhat deploy --network base_sepolia_stable_dev_prod
  • deploy:base_sepolia_stable_dev_staginghardhat deploy --network base_sepolia_stable_dev_staging
  • deploy:base_sepolia_testhardhat deploy --network base_sepolia_test
  • deploy:gnosis_chiado_testhardhat deploy --network gnosis_chiado_test
  • deploy:gnosis_mainnethardhat deploy --network gnosis_mainnet
  • deploy:localhosthardhat deploy --network hardhat
  • deploy:neuroweb_mainnethardhat deploy --network neuroweb_mainnet
  • deploy:neuroweb_testnethardhat deploy --network neuroweb_testnet
  • devhardhat node --network hardhat --config hardhat.node.config.ts
  • export-abihardhat export-abi
  • formatprettier --check --plugin=prettier-plugin-solidity '**/*.{json,js,ts,sol}'
  • format:fixprettier --write --plugin=prettier-plugin-solidity '**/*.{json,js,ts,sol}'
  • generate-evm-accounthardhat run scripts/generate_evm_account.ts --network localhost
  • generate-neuroweb-accounthardhat run scripts/generate_neuroweb_account.ts --network localhost
  • lintnpm run lint:sol && npm run lint:ts
  • lint:fixnpm run lint:sol:fix && npm run lint:ts:fix
  • lint:solsolhint 'contracts/**/*.sol'
  • lint:sol:fixsolhint 'contracts/**/*.sol' --fix
  • lint:tseslint '**/*.{js,ts}'
  • lint:ts:fixeslint '**/*.{js,ts}' --fix
  • mint-test-tokenscross-env HARDHAT_DEPLOY_FIXTURE=true hardhat run scripts/mint_test_tokens.ts --network localhost
  • prepareif [ "$NODE_ENV" == "development" ]; then husky install && hardhat typechain; fi
  • slitherslither .
  • …and 11 more.
Dependencies13
  • @openzeppelin/contracts^5.1.0
  • @polkadot/api^15.0.2
  • @polkadot/keyring^13.2.3
  • @polkadot/util^13.2.3
  • @polkadot/util-crypto^13.2.3
  • @prb/math^4.1.0
  • dotenv^16.4.7
  • hardhat^2.22.17
  • hardhat-deploy^0.12.4
  • hardhat-deploy-ethers^0.4.2
  • solady^0.0.285
  • ts-node^10.9.1
  • typescript^5.7.2