Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 73
- First published
- Jun 2026
- Publisher
- agentic-in
Recommended action
Looks clean — keep monitoringNo high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
No high-signal static finding in the saved report.
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk low · score 0 · status changed
Evidence
Static findings
No findings stored for this release.
Manifest
Package metadata
Scripts22
buildtsc -p tsconfig.jsonchecktsc --noEmit -p tsconfig.jsonexperiment:long-horizonnpm run build && node scripts/long-horizon-value.mjsprepacknpm run buildsite:buildnpm --prefix website run buildsite:servenpm --prefix website run servesite:startnpm --prefix website run starttestnpm run build && node --test dist/test/*.test.jsvalidate:allnpm run build && for milestone in T0 T1 T2 T3 T4 T5 T6 T7 T8 T9 T10; do node dist/src/validation/milestone.js $milestone || exit 1; donevalidate:omni-e2e-runtimenpm run build && node dist/src/validation/omni-e2e-runtime.jsvalidate:omni-realnpm run build && node dist/src/validation/omni-real-smoke.jsvalidate:t0npm run build && node dist/src/validation/milestone.js T0validate:t1npm run build && node dist/src/validation/milestone.js T1validate:t10npm run build && node dist/src/validation/milestone.js T10validate:t2npm run build && node dist/src/validation/milestone.js T2validate:t3npm run build && node dist/src/validation/milestone.js T3validate:t4npm run build && node dist/src/validation/milestone.js T4validate:t5npm run build && node dist/src/validation/milestone.js T5validate:t6npm run build && node dist/src/validation/milestone.js T6validate:t7npm run build && node dist/src/validation/milestone.js T7validate:t8npm run build && node dist/src/validation/milestone.js T8validate:t9npm run build && node dist/src/validation/milestone.js T9
Dependencies4
@colbymchenry/codegraph0.9.9commander^14.0.2typescript^5.9.3yaml^2.8.1