Package evidence

[email protected]

Remote Dependency Spec: dependencies.jquery="git+https://github.com/skuid/jquery#skuid-16.1.0-v2-3.5.1.2"

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published: 1
First published: Jun 2026
Publisher: bentev

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'

Publisherbentev

Artifact bytes17,238,799

Previous versionnone

Published2026-06-03T21:21:06.854Z

SHA-2569353d2758bce0317584f6f667bb1aed7e82cb3c76fe590d9257b2c0d9927c770

Why flagged

What the scanner saw

Remote Dependency Spec: dependencies.jquery="git+https://github.com/skuid/jquery#skuid-16.1.0-v2-3.5.1.2"

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

11d agoLast checked

reviewRisk

20Score

1.0.0Version

Status history (1 event)

new → available11d ago · risk review · score 20 · status changed

Evidence

Static findings

2 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
medium	Remote Dependency Spec	package.json	dependencies.jquery="git+https://github.com/skuid/jquery#skuid-16.1.0-v2-3.5.1.2"	12
medium	Remote Dependency Spec	package.json	devDependencies.grunt-qunit-junit="github:sbrandwoo/grunt-qunit-junit"	8

Manifest

Package metadata

Scripts19

buildmake build
build:prodmake build-prod
compileIconsgrunt compileIcons
dist:jsmake dist-js
dist:thememake dist-theme
generate-formula-debuggerpeggy --trace --cache --format commonjs --dependency skuidTime:../../js/pageComposer/core/formulaTime -o build/js/formulaDebugger.js lib/formulas/skuid_formulas.pegjs
lintmake lint
localmake local
prepushmake lint
testmake test
test:browsermake browser-test
test:coveragemake test-with-coverage
test:coverage:openmake open-coverage
test:filtermake test-filter
test:modulemake test-module
test:projectormake test-projector
test:specmake test-spec
watchmake watch
watch:livemake watch-live

Dependencies46

@exp-textura/icons~0.7.0
@exp-textura/react~0.9.0
@floating-ui/dom^1.5.3
@fullcalendar/core~5.4.0
@fullcalendar/daygrid~5.4.0
@fullcalendar/interaction~5.4.0
@fullcalendar/list~5.4.0
@fullcalendar/moment-timezone~5.4.0
@fullcalendar/resource-timegrid~5.4.0
@fullcalendar/resource-timeline~5.4.0
@fullcalendar/timegrid~5.4.0
chalk^5.3.0
clean-css4.2.1
css-vendor1.0.3
fast-deep-equal^3.1.3
file-loader^6.2.0
hammerjs2.0.8
highcharts^9.3.0
implement-js0.0.23
jquerygit+https://github.com/skuid/jquery#skuid-16.1.0-v2-3.5.1.2
jquery-ui^1.13.3
js-cookie2.2.0
jsoneditor9.9.2
jsonpath^1.1.1
jss10.10.0
jss-plugin-camel-case10.10.0
jss-plugin-global10.10.0
jss-plugin-nested10.10.0
jss-plugin-vendor-prefixer10.10.0
jszip^3.10.1
…and 16 more.