Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Weekly downloads
- 550
- Versions published
- 20
- First published
- Mar 2026
- Publisher
- minhyupp
Recommended action
Looks clean — keep monitoringNo high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Obfuscation Density: high encoded/escaped-token density
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk low · score 0 · status changed
Evidence
Static findings
169 static · 0 from release diff · showing high-signal first.
No high-signal findings — see all findings below.
Show all 169 findings (low-signal and informational)
Showing 60 of 169 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| low | Obfuscation Density | package/dist/features/commit/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/gen-html-multiple/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/gen-html/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/gen-storybook/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/mcp/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/minify-md/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/retouch/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/review/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/security-policy/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/sh/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/show-stream/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/talk-to-figma/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/token-optimizer/application/action.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/talk-to-figma/application/agent.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/be.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/ai-services/internal/build-service-command.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/actions/chat.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/ai-services/builders/claude.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/cli.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/ai-services/builders/codex.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/ai-services/internal/execute-attempt.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/gen-html/application/executor.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/fe.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/gen-html/application/finalize-record.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/ai-services/builders/gemini.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/gen-html/application/generate-artifacts.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/gen-html/application/generation.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/request-security/guard.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/core/helpers.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/change-service/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/commit/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/exit/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/gen-html-multiple/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/gen-html/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/gen-storybook/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/local-server-settings/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/mcp-health-check/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/mcp-register/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/mcp-unregister/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/mcp/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/minify-md/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/retouch-start/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/review/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/security-policy/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/server-refresh/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/server-restart/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/server-start/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/server-status/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/server-stop/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/sh/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/show-stream/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/talk-to-figma/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/command-modules/token-optimizer/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/exports/rules/common/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/gen-html/infrastructure/local-server/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/features/minify-md/assets/rules/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/ai-services/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/ai-services/internal/health-checkers/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/assets/rules/fe/index.cjs | high encoded/escaped-token density | 0 |
| low | Obfuscation Density | package/dist/platform/command-runtime/index.cjs | high encoded/escaped-token density | 0 |
Manifest
Package metadata
Scripts13
buildpnpm build:bundle && pnpm build:types && pnpm build:verify-declarationsbuild:bundletsupbuild:typestsc -p tsconfig.types.jsonbuild:verify-declarationsnode ./dist/exports/declaration-alias-check.js ./distcheck-typestsc --noEmitju-hong-bepnpm build && node ./dist/be.jsju-hong-epnpm build && node ./dist/cli.jsju-hong-fepnpm build && node ./dist/fe.jslatestpnpm update 'sales-*' --latestreleasepnpm publishreviewgemini-review --review --stream-outputtestvitest runtest:coveragevitest run --coverage
Dependencies1
posthog-node^5.28.5