PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
93
First published
Apr 2026
Publisher
dnaroid

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisherdnaroid
Artifact bytes196,578
Previous version0.12.28
Published2026-06-09T15:39:39.394Z
SHA-2560f09196c6e21a6e9d4880e28d50d264a23bbb96f9b5bc0a5c6c2c160545c3033

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.12.29Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts18
  • buildtsx scripts/generate-skills-version.ts && tsc
  • devtsc --watch
  • indexer-clitsx bin/indexer-cli.js
  • indexer-cli:inittsx bin/indexer-cli.js init
  • indexer-cli:uninstalltsx bin/indexer-cli.js uninstall -f
  • publish-npmbash scripts/publish.sh
  • refresh-skillstsx bin/indexer-cli.js init --refresh-skills
  • smoke-testbash scripts/smoke-test-package.sh
  • starttsx bin/indexer-cli.js
  • testvitest run tests/unit/
  • test:clivitest run tests/cli/ --testTimeout=180000 --no-file-parallelism
  • test:cli:csharpvitest run tests/cli/commands-csharp.test.ts --testTimeout=180000 --no-file-parallelism
  • test:cli:gdscriptvitest run tests/cli/commands-gdscript.test.ts --testTimeout=180000 --no-file-parallelism
  • test:cli:pythonvitest run tests/cli/commands-python.test.ts --testTimeout=180000 --no-file-parallelism
  • test:cli:rubyvitest run tests/cli/commands-ruby.test.ts --testTimeout=180000 --no-file-parallelism
  • test:cli:rustvitest run tests/cli/commands-rust.test.ts --testTimeout=180000 --no-file-parallelism
  • test:fullvitest run tests/unit/ tests/cli/ --testTimeout=180000
  • test:watchvitest
Dependencies12
  • better-sqlite3^12.0.0
  • commander^12.1.0
  • p-limit^4.0.0
  • proper-lockfile^4.1.2
  • sqlite-vec^0.1.9
  • tree-sitter^0.21.1
  • tree-sitter-c-sharp0.23.1
  • tree-sitter-gdscript^6.1.0
  • tree-sitter-python^0.21.0
  • tree-sitter-ruby^0.23.1
  • tree-sitter-rust^0.21.0
  • ts-morph^21.0.0