PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
1,029Niche · −30% score
Versions published
111
First published
Mar 2026
Publisher
lutfiannas

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisherlutfiannas
Artifact bytes8,227,128
Previous version5.0.11
Published2026-06-11T02:01:28.589Z
SHA-256662c9e84b059a4e73839af4ff73048ed68599825754aac7c358a67b329a425e0

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
5.0.12Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts55
  • benchnode benchmarks/hotpath.bench.mjs
  • bench:fullnode benchmarks/hotpath.bench.mjs && node benchmarks/run.js
  • bench:nativetsx benchmarks/native-parser-bench.ts
  • bench:watchnode --watch benchmarks/hotpath.bench.mjs
  • buildnpm run build:rust && npm run build:packages && rm -rf dist && tsup --config tsup.config.ts && tsup --config tsup.dts.config.ts && npm run example:build
  • build:devnpm run build:packages && rm -rf dist && tsup --config tsup.config.ts --sourcemap --watch
  • build:fastnpm run build:packages && rm -rf dist && tsup --config tsup.config.ts && tsup --config tsup.dts.config.ts
  • build:packagesturbo run build --continue
  • build:releasenpm run build:rust && npm run build:packages && rm -rf dist && tsup --config tsup.config.ts --no-sourcemap && tsup --config tsup.dts.config.ts && npm run example:build
  • build:rustcd native && napi build --release
  • checkturbo run check --continue && npm run check:types && npm run check:boundaries && npm run check:umbrella && npm run check:file-deps
  • check:binary-sizenode scripts/check-binary-size.mjs
  • check:binary-size:strictnode scripts/check-binary-size.mjs --max-mb=15
  • check:boundariesdepcruise --config dependency-cruiser.cjs packages
  • check:file-depstsx scripts/graph/monorepo-file-deps.ts --check
  • check:typestsc --noEmit
  • check:umbrellatsx scripts/check-umbrella-exports.ts
  • cleanrm -rf dist && turbo run clean --continue
  • devtsup --config tsup.config.ts --watch
  • example:buildcd examples/next-js-app && npm install --ignore-scripts && npx next build --turbopack
  • example:devcd examples/next-js-app && npm install --ignore-scripts && npx next dev
  • example:typecheckcd examples/next-js-app && npx tsc --noEmit
  • generate:schemascargo run --bin export-schemas --manifest-path native/Cargo.toml 2>/dev/null && npx tsx scripts/generate-json-schemas.ts || npx tsx scripts/generate-json-schemas.ts
  • generate:schemas:checknpx tsx scripts/generate-json-schemas.ts && git diff --exit-code packages/domain/shared/src/generated/ || (echo "Generated schemas differ — run npm run generate:schemas and commit" && exit 1)
  • graph:file-depstsx scripts/graph/monorepo-file-deps.ts
  • health:summarynpx tsx scripts/validate/health-summary.ts
  • lintbiome check --write .
  • lint:fixnpx biome check --write packages/domain/ packages/infrastructure/ packages/presentation/ --no-errors-on-unmatched
  • pack:checktsx scripts/check-pack-artifacts.ts
  • scan:savenpx tw scan --save
  • …and 25 more.
Dependencies2
  • @clack/prompts^1.1.0
  • ts-pattern^5.9.0
Optional dependencies8
  • @tailwind-styled/native-darwin-arm645.0.6-canary.0.0
  • @tailwind-styled/native-darwin-x645.0.6-canary.0.0
  • @tailwind-styled/native-linux-arm64-gnu5.0.6-canary.0.0
  • @tailwind-styled/native-linux-x64-gnu5.0.6-canary.0.0
  • @tailwind-styled/native-win32-x64-msvc5.0.6-canary.0.0
  • oxc-minify^0.120.0
  • oxc-parser^0.120.0
  • oxc-transform^0.120.0