PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
95Mature · −50% score
First published
Jun 2017
Publisher
nilock

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publishernilock
Artifact bytes137,775
Previous version0.2.5
Published2026-06-09T12:53:57.675Z
SHA-256d996157faf0ea6696d4435cc65a46e89dcaffd2999eef7fec927af5af9d6d429

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
0.2.7Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts16
  • buildrm -rf dist && tsc && npm run embed:studio-ui-src && npm run embed:templates && npm run embed:standalone-ui
  • devtsc --watch
  • embed:standalone-uimkdir -p dist/standalone-ui-template && cp -r ../standalone-ui/src dist/standalone-ui-template/ && cp ../standalone-ui/package.json dist/standalone-ui-template/ && cp ../standalone-ui/tsconfig.json dist/standalone-ui-template/ && cp ../standalone-ui/vite.config.ts dist/standalone-ui-template/ && cp ../standalone-ui/index.html dist/standalone-ui-template/ && (cp ../standalone-ui/.gitignore dist/standalone-ui-template/ 2>/dev/null || true)
  • embed:studio-ui-srcmkdir -p dist/studio-ui-src && cp -r ../studio-ui/src/* dist/studio-ui-src/ && cp ../studio-ui/package.json dist/studio-ui-src/ && cp ../studio-ui/vite.config.ts dist/studio-ui-src/ && cp ../studio-ui/tsconfig.json dist/studio-ui-src/ && cp ../studio-ui/index.html dist/studio-ui-src/ && sed -i 's|resolve(__dirname, \.\., \.\.)|resolve(__dirname)|' dist/studio-ui-src/vite.config.ts && sed -i 's|/src/main.ts|./main.ts|' dist/studio-ui-src/index.html
  • embed:templatesmkdir -p dist/templates && cp -r templates/.skuilder dist/templates/
  • lintnpx eslint .
  • lint:checknpx eslint . --max-warnings 0
  • lint:fixnpx eslint . --fix
  • test:e2ecypress open --e2e
  • test:e2e:custom:devcypress open --e2e --config baseUrl=http://localhost:5173
  • test:e2e:custom:dev:headlesscypress run --spec 'cypress/e2e/custom-questions-dev.cy.js'
  • test:e2e:custom:studiocypress open --e2e --config baseUrl=http://localhost:7174
  • test:e2e:custom:studio:headlesscypress run --spec 'cypress/e2e/custom-questions-studio.cy.js' --config baseUrl=http://localhost:7174
  • test:e2e:headlesscypress run --spec 'cypress/e2e/scaffolded-app.cy.js'
  • try:initnode dist/cli.js init testproject --dangerously-clobber --no-interactive --data-layer static --import-course-data --import-server-url http://localhost:5984 --import-username admin --import-password password --import-course-ids 2aeb8315ef78f3e89ca386992d00825b && cd testproject && npm i && npm install --save-dev @vue-skuilder/cli@file:.. && npm install @vue-skuilder/common@file:../../common @vue-skuilder/db@file:../../db @vue-skuilder/courseware@file:../../courseware @vue-skuilder/common-ui@file:../../common-ui @vue-skuilder/express@file:../../express
  • try:init:emptynode dist/cli.js init testproject-empty --dangerously-clobber --no-interactive --data-layer static && cd testproject-empty && npm i && npm install --save-dev @vue-skuilder/cli@file:.. && npm install @vue-skuilder/common@file:../../common @vue-skuilder/db@file:../../db @vue-skuilder/courseware@file:../../courseware @vue-skuilder/common-ui@file:../../common-ui @vue-skuilder/express@file:../../express
Dependencies19
  • @mdi/font^7.3.67
  • @vue-skuilder/common0.2.7
  • @vue-skuilder/common-ui0.2.7
  • @vue-skuilder/courseware0.2.7
  • @vue-skuilder/db0.2.7
  • @vue-skuilder/edit-ui0.2.7
  • @vue-skuilder/express0.2.7
  • @vue-skuilder/mcp0.2.7
  • chalk^5.3.0
  • commander^11.0.0
  • fs-extra^11.2.0
  • inquirer^9.2.0
  • leveldown^6.1.1
  • pinia^2.3.0
  • pouchdb^9.0.0
  • serve-static^1.15.0
  • vue^3.5.13
  • vue-router^4.2.0
  • vuetify^3.7.0