Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 1
- First published
- Jun 2026
- Publisher
- productdevbook
Recommended action
Looks clean — keep monitoringNo high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
No high-signal static finding in the saved report.
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk low · score 0 · status changed
Evidence
Static findings
No findings stored for this release.
Manifest
Package metadata
Scripts15
buildbun run build:registry && bun run build:cssbuild:csstailwindcss -i app/styles/input.css -o public/styles.css --minifybuild:registrybun run scripts/build-registry.tsbuild:staticbun run build:registry && bun run build:css && bun run scripts/build-static.tsclinode scripts/cli.mjsdevconcurrently -k -n server,css -c blue,green "bun run dev:server" "bun run dev:css"dev:csstailwindcss -i app/styles/input.css -o public/styles.css --watchdev:serverbun run --hot app/server.tsxtest:a11yplaywright test tests/a11y.spec.tstest:clibun test scripts/cli.test.tstest:e2eplaywright testtest:e2e:uiplaywright test --uitest:geomplaywright test tests/geometry.spec.tstest:kbdplaywright test tests/keyboard.spec.tstypechecktsc --noEmit