Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published: 5
First published: Mar 2026
Publisher: apeguru

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'

Publisherapeguru

Artifact bytes307,798

Previous version0.3.0

Published2026-03-24T22:29:36.828Z

SHA-2569b8d7d8f2694b0be30d5f899ccd8d6d7fd4394049d981a14f1eadc250bdcf13e

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

9h agoLast checked

lowRisk

0Score

0.4.0Version

Status history (1 event)

new → available9h ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts7

buildtsup
lintbiome check .
lint:fixbiome check --write .
pack:checknode -e "const { execFileSync } = require('node:child_process'); const { mkdtempSync, rmSync } = require('node:fs'); const { tmpdir } = require('node:os'); const { join } = require('node:path'); const dir = mkdtempSync(join(tmpdir(), 'web3agent-pack-')); try { execFileSync(process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm', ['pack', '--pack-destination', dir], { stdio: 'inherit' }); } finally { rmSync(dir, { recursive: true, force: true }); }"
testvitest run
test:watchvitest
typechecktsc --noEmit

Dependencies21

@goat-sdk/core^0.5.0
@goat-sdk/plugin-0x^0.1.11
@goat-sdk/plugin-balancer^0.1.15
@goat-sdk/plugin-coingecko^0.2.10
@goat-sdk/plugin-dexscreener^0.1.9
@goat-sdk/plugin-ens^0.1.4
@goat-sdk/plugin-erc20^0.2.14
@goat-sdk/plugin-erc721^0.1.22
@goat-sdk/plugin-uniswap^0.2.16
@goat-sdk/wallet-viem^0.2.0
@lifi/sdk^3.15.6
@modelcontextprotocol/sdk^1.27.1
@orbs-network/liquidity-hub-sdk^1.0.74
@orbs-network/twap-sdk^5.0.0
@orbs-network/twap-ui4.0.26-fix.1
@x402/core^2.6.0
@x402/evm^2.6.0
@x402/fetch^2.6.0
viem^2.0.0
zod^3.25.0
zod-to-json-schema^3.23.5