Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 793
Versions published: 111
First published: Mar 2026
Publisher: lumea-technologies

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'

Publisherlumea-technologies

Artifact bytes272,573

Previous version0.10.5

Published2026-06-13T10:18:19.441Z

SHA-256e9cce3ae9638ae8bd8aebb729cd1352481fc8c6a2f4fa205f37be6be252b4aa2

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

16h agoLast checked

lowRisk

0Score

0.10.6Version

Status history (1 event)

new → available16h ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts7

buildpnpm --filter @polpo-ai/core build && pnpm --filter @polpo-ai/vault-crypto build && pnpm --filter @polpo-ai/drizzle build && pnpm --filter @polpo-ai/llm build && pnpm --filter @polpo-ai/tools build && pnpm --filter @polpo-ai/server build && tsc && pnpm --filter @polpo-ai/sdk build && pnpm --filter @polpo-ai/react build && pnpm --filter @polpo-ai/cli build
cleanrm -rf dist
devtsc --watch
startnode packages/cli/dist/index.js
testvitest
test:coveragevitest run --coverage
typecheckpnpm --filter @polpo-ai/core build && pnpm --filter @polpo-ai/vault-crypto build && pnpm --filter @polpo-ai/drizzle build && pnpm --filter @polpo-ai/llm build && pnpm --filter @polpo-ai/tools build && pnpm --filter @polpo-ai/server build && ./node_modules/.bin/tsc --noEmit

Dependencies17

@ai-sdk/gateway^3.0.83
@ai-sdk/openai^3.0.48
@hono/node-server^1.19.9
@hono/zod-openapi^1.2.2
@polpo-ai/core0.10.6
@polpo-ai/llm0.10.6
@polpo-ai/server0.10.6
@polpo-ai/vault-crypto0.10.6
@sinclair/typebox^0.34.48
ai^6.0.141
chalk^5.4.1
commander^13.1.0
execa^9.6.1
hono^4.11.9
nanoid^5.1.2
yaml^2.7.0
zod^4.3.6

Optional dependencies6

@polpo-ai/drizzle0.10.6
better-sqlite3^12.6.2
drizzle-orm^0.44.0
nodemailer^8.0.1
playwright-core^1.52.0
postgres^3.4.0