PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
86
First published
Apr 2026
Publisher
dyw1234

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisherdyw1234
Artifact bytes4,419,245
Previous version0.5.0
Published2026-06-10T16:17:36.054Z
SHA-256beb2405840ba1325eaf646f3e652bb2a06e3e40f1db2d6953cee9f50449ec369

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.5.1Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts8
  • buildcd dashboard && npx tsc -p tsconfig.node.json && cd .. && tsc && node -e "const fs=require('fs');const p=require('path');const s='src/tools/impeccable/live/static',d='dist/src/tools/impeccable/live/static';if(fs.existsSync(s)){fs.mkdirSync(d,{recursive:true});for(const f of fs.readdirSync(s)){fs.copyFileSync(p.join(s,f),p.join(d,f))}}" && node -e "const fs=require('fs');const s='src/graph/db/schema.sql',d='dist/src/graph/db/schema.sql';if(fs.existsSync(s)){fs.mkdirSync(require('path').dirname(d),{recursive:true});fs.copyFileSync(s,d)}"
  • build:mirrorsnode scripts/convert-claude-to-agy.mjs && node scripts/build-agents-standard.mjs
  • cleanrm -rf dist
  • devtsc --watch
  • linttsc --noEmit
  • mcpnode bin/maestro-mcp.js
  • prepublishOnlynpm run build && npm run build:mirrors
  • startnode bin/maestro.js
Dependencies21
  • @anthropic-ai/claude-agent-sdk^0.2.77
  • @hono/node-server^1.14.0
  • @inkjs/ui^2.0.0
  • @inquirer/prompts^8.3.2
  • @modelcontextprotocol/sdk^1.12.1
  • argon2^0.44.0
  • better-sqlite3^12.10.0
  • chokidar^4.0.0
  • commander^13.1.0
  • drizzle-orm^0.45.2
  • hono^4.7.0
  • ink^6.0.0
  • ink-big-text^2.0.0
  • ink-gradient^4.0.0
  • ink-spinner^5.0.0
  • marked^15.0.0
  • node-cron^4.2.1
  • pg^8.20.0
  • react^19.0.0
  • ws^8.19.0
  • zod^4.0.0
Optional dependencies1
  • @colbymchenry/codegraph^0.9.8