PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
11,966Mainstream · −50% score
Versions published
257Mature · −50% score
First published
Apr 2017
Publisher
emeeks

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisheremeeks
Artifact bytes4,504,563
Previous version2.0.3
Published2026-03-02T01:24:03.120Z
SHA-25629410ed67d03560bf01365fbf9691c2516c786ed56dc657e2dba40dbf69b08aa

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
3.0.0-beta.1Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts26
  • benchvitest bench
  • bench:baselinevitest bench --run && node scripts/save-baseline.js
  • bench:comparevitest bench --run && node scripts/compare-baseline.js
  • bench:uivitest bench --ui
  • buildparcel build --target website
  • build:analyzenode scripts/build.mjs --analyze
  • build:mcptsc -p tsconfig.mcp.json
  • build:prodnode scripts/build.mjs --production
  • cleanrm -rf .parcel-cache docs/build dist && echo 'All caches and build artifacts cleared'
  • create-release-branchsh ./scripts/create-release-branch.sh
  • distnode scripts/build.mjs
  • dist:prodnode scripts/build.mjs --production
  • linteslint src
  • lint:fixeslint src --fix
  • prepublishOnlynode scripts/build.mjs --production
  • pretest:distnode scripts/build.mjs
  • publish-releasesh ./scripts/publish-release.sh
  • serve-examplesnpm run dist && parcel serve integration-tests/index.html integration-tests/xy-examples/index.html integration-tests/ordinal-examples/index.html integration-tests/network-examples/index.html integration-tests/viz-examples/index.html integration-tests/hoc-legend-examples/index.html --dist-dir .parcel-cache/integration-tests
  • startparcel serve --target website --port 3000
  • testjest --config jest.config.js
  • test:distplaywright test
  • typescripttsc --noEmit
  • website:buildnpm run dist:prod && parcel build --target website
  • website:cleannpm run clean && npm run dist:prod
  • website:startnpm run dist:prod && parcel serve --target website --no-cache
  • website:start:cleannpm run clean && npm run dist:prod && parcel serve --target website --no-cache
Dependencies26
  • @modelcontextprotocol/sdk^1.12.1
  • d3-array3.2.4
  • d3-brush3.0.0
  • d3-chord3.0.1
  • d3-contour^1.1.1
  • d3-delaunay^6.0.4
  • d3-force3.0.0
  • d3-format^3.1.0
  • d3-glyphedge^1.2.0
  • d3-hexbin^0.2.2
  • d3-hierarchy3.1.2
  • d3-interpolate3.0.1
  • d3-path-arrows^0.4.0
  • d3-polygon3.0.1
  • d3-sankey-circular0.34.0
  • d3-scale4.0.2
  • d3-scale-chromatic^3.1.0
  • d3-selection3.0.0
  • d3-shape3.2.0
  • d3-time-format^4.1.0
  • dequal^2.0.3
  • labella1.1.4
  • memoize-one^5.1.1
  • polygon-offset0.3.2
  • regression^2.0.1
  • svg-path-bounding-box1.0.4