PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
5
First published
Jun 2026
Publisher
jetienne

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisherjetienne
Artifact bytes188,363
Previous version1.0.5
Published2026-06-04T14:38:01.054Z
SHA-256882898b8795cb1917c77f5ae272144876949281e2634347eac82c042f25b83d2

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
1.0.6Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts38
  • buildtsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json --resolve-full-paths
  • cleanrm -rf dist
  • clean:allnpm run dev:cost:clear && npm run openai_cache:clean
  • dev:chat:bluesky_social_managertsx ./src/cli.ts chat -c ./data/skillets/bluesky_social_manager.skillet.yaml
  • dev:chat:business_analysttsx ./src/cli.ts chat -c ./data/skillets/business_analyst.skillet.yaml
  • dev:chat:multi_bluesky_agenttsx ./src/cli.ts chat -c ./data/skillets/multi_bluesky_agent/multi_bluesky_agent.skillet.yaml
  • dev:chat:todo_listtsx ./src/cli.ts chat -c ./data/skillets/todo_list.skillet.yaml
  • dev:chat:web_browsertsx ./src/cli.ts chat -c ./data/skillets/web_browser.skillet.yaml
  • dev:cost:clearrm -f ./outputs/.openai_cost_tracker.sqlite
  • dev:cost:listnpx --package=openai-cost openai_cost_pp -p '{namespace}/{userId}/{skilletId}/{sessionId}' -k userId,skilletId -i ./outputs/.openai_cost_tracker.sqlite
  • dev:cost:list:watchnpx --package=openai-cost openai_cost_pp -p '{namespace}/{userId}/{skilletId}/{sessionId}' -k userId,skilletId -i ./outputs/.openai_cost_tracker.sqlite -w
  • dev:eval:grade:blueskytsx ./src/cli.ts eval_grade -f ./data/skillets/evals/bluesky_evals
  • dev:eval:run:blueskytsx ./src/cli.ts eval_run -c ./data/skillets/bluesky_social_manager.skillet.yaml -f ./data/skillets/evals/bluesky_evals
  • dev:jobs:cleartsx ./src/cli.ts jobs clear --yes
  • dev:jobs:costnpx tsx ./src/cli.ts jobs cost
  • dev:jobs:cost:by-jobnpx tsx ./src/cli.ts jobs cost --by job
  • dev:jobs:cost:watchwatch -c -n 1 'FORCE_COLOR=1 npx tsx ./src/cli.ts jobs cost'
  • dev:jobs:create:news_brieftsx ./src/cli.ts jobs create -t ./data/crew_news_brief/crew_news_brief.job_template.yaml --input '{"topic":"rust web frameworks"}'
  • dev:jobs:create:social_sharetsx ./src/cli.ts jobs create -t ./data/crew_social_share/crew_social_share.job_template.yaml --input '{"topic":"local-first sync engines","highlights":"launched today, syncs offline edits, free tier included","link":"https://example.com/post"}'
  • dev:jobs:dispatchertsx watch --include "src/**/*.ts" ./src/cli.ts jobs dispatcher --tick-interval-ms 1000
  • dev:jobs:listnpx tsx ./src/cli.ts jobs list
  • dev:jobs:list:watchwatch -c -n 1 'FORCE_COLOR=1 npx tsx ./src/cli.ts jobs list'
  • dev:jobs:schedules:create:news_brieftsx ./src/cli.ts jobs schedules create -n 'Daily news brief' -t crew_news_brief/crew_news_brief.job_template.yaml --input '{"topic":"rust web frameworks"}' --cadence daily --at 09:00
  • dev:jobs:schedules:create:social_sharetsx ./src/cli.ts jobs schedules create -n 'Weekly social share' -t crew_social_share/crew_social_share.job_template.yaml --input '{"topic":"local-first sync engines","highlights":"launched today, syncs offline edits, free tier included","link":"https://example.com/post"}' --cadence weekly --days mon,wed,fri --at 08:30
  • dev:jobs:schedules:listtsx ./src/cli.ts jobs schedules list
  • dev:log:streamtsx ./src/cli.ts log stream
  • dev:run:todo_listtsx ./src/cli.ts run -c ./data/skillets/todo_list.skillet.yaml 'what are my tasks?'
  • openai_cache:cleanrm -f ./outputs/.openai_cache.sqlite
  • postbuildchmod +x ./dist/cli.js
  • prepublishOnlynpm run test && npm run build
  • …and 8 more.
Dependencies18
  • @keyv/sqlite^4.0.8
  • @openai/agents^0.8.2
  • @openai/agents-core^0.8.3
  • @playwright/cli^0.1.1
  • @types/mdast^4.0.4
  • better-sqlite3^12.8.0
  • cacheable^2.3.3
  • chalk^5.6.2
  • commander^14.0.3
  • dotenv^17.3.1
  • gray-matter^4.0.3
  • md-to-pdf^5.2.5
  • openai-cache^1.0.37
  • openai-cost^1.0.32
  • proper-lockfile^4.1.2
  • remark^15.0.1
  • yaml^2.8.3
  • zod^4.0.0