PkgRadar

Package evidence

[email protected]

no findings

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publishersushegaad
Artifact bytes470,406
Previous version0.8.1
Published2026-05-24T01:37:32.840Z
SHA-2560e43472728aa4f34a2d80bd4675ea890f2136f00a8f81c30020d0c33a9c5916a

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.8.2Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts11
  • buildtsup
  • devtsx src/index.ts
  • generate-checksumstsx scripts/generate-checksums.ts
  • linteslint src --ext .ts
  • postbuildrm -rf dist/seed && mkdir -p dist/seed && cp -r src/seed/policy-templates dist/seed/policy-templates && cp -r src/seed/procedure-templates dist/seed/procedure-templates && cp -r src/seed/evidence-templates dist/seed/evidence-templates && cp -r src/seed/partials dist/seed/partials
  • prepacknpm run build
  • prepublishOnlynpm run typecheck && npm test && npm run build
  • testvitest run --coverage
  • test:watchvitest
  • typechecktsc --noEmit
  • verify-checksumstsx scripts/verify-checksums.ts
Dependencies4
  • @modelcontextprotocol/sdk1.29.0
  • better-sqlite3-multiple-ciphers12.9.0
  • mustache4.2.0
  • zod3.25.76
Optional dependencies2
  • express4.22.1
  • express-rate-limit7.5.1