PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
190Mature · −50% score
First published
Mar 2020
Publisher
tywalch

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publishertywalch
Artifact bytes101,687
Previous version3.8.0
Published2026-05-25T19:47:39.679Z
SHA-25651955b0433eb6e51413e532fa259c95e16caf31e388ddfb6c00a45d7a8274efc

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
3.9.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts32
  • buildsh buildbrowser.sh
  • build:browserbrowserify playground/browser.js -o playground/bundle.js
  • coveragenpm run test:init:hard && nyc npm run test:unit && nyc report --reporter=text-lcov | coveralls
  • coverage:local:coverallsnpm run test:init:hard && nyc npm run test:unit && nyc report --reporter=text-lcov | coveralls
  • coverage:local:htmlnpm run test:init:hard && nyc npm run test:unit && nyc report --reporter=html
  • ddb:loaddocker compose exec electro npm run test:init:hard
  • ddb:startdocker compose up -d dynamodb
  • ddb:stopdocker compose stop
  • examples:load:librarynpm run ddb:start && npm run local:init && ts-node ./examples/library/load.ts
  • examples:load:taskmanagernpm run ddb:start && npm run local:init && ts-node ./examples/taskManager/load.ts
  • examples:load:versioncontrolnpm run ddb:start && npm run local:init && ts-node ./examples/versionControl/load.ts
  • examples:locksnpm run ddb:start && npm run local:init && ts-node ./examples/locks
  • examples:provisiontablenpm run ddb:start && npm run local:init && ts-node ./examples/provisionTable
  • examples:query:librarynpm run ddb:start && npm run local:init && ts-node ./examples/library/query.ts
  • examples:query:taskmanagernpm run ddb:start && npm run local:init && ts-node ./examples/taskManager/query.ts
  • examples:query:versioncontrolnpm run ddb:start && npm run local:init && ts-node ./examples/versionControl/query.ts
  • formatprettier -w src/**/*.js examples/**/* --log-level=error
  • local:debugnpm run local:start && npm run local:exec
  • local:execLOCAL_DYNAMO_ENDPOINT='http://localhost:8000' ts-node ./test/debug.ts
  • local:freshnpm run ddb:start && npm run local:init:hard
  • local:initLOCAL_DYNAMO_ENDPOINT='http://localhost:8000' npm run test:init
  • local:init:hardLOCAL_DYNAMO_ENDPOINT='http://localhost:8000' npm run test:init:hard
  • local:startnpm run ddb:start && npm run local:init
  • local:stopnpm run ddb:stop
  • test./test.sh
  • test:cinpm install && npm test
  • test:formatprettier -c src/**/*.js examples/**/*
  • test:initnode ./test/init.js
  • test:init:hardnode ./test/init.js --recreate
  • test:runnpm run test:types && npm run test:init && npm run test:unit
  • …and 2 more.
Dependencies3
  • @aws-sdk/lib-dynamodb^3.654.0
  • @aws-sdk/util-dynamodb^3.654.0
  • jsonschema1.5.0