PkgRadar

Package evidence

@ada-support/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
295Mature · −50% score
First published
Oct 2020
Publisher
msa-npm

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@ada-support/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@ada-support/[email protected]"],"fail_on":"review"}'
Publishermsa-npm
Artifact bytes186,357
Previous version1.13.4
Published2026-05-01T19:11:08.460Z
SHA-256481108931690a95abfa878f0651bbb5033f6f48d22f91bf11fd80151da56e524

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
1.13.5Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts28
  • audit-dependenciesyarn audit --groups dependencies
  • buildTS_NODE_PROJECT=wp.tsconfig.json NODE_ENV=production npx webpack --config webpack.prod.ts
  • build:npm./npm-build.sh
  • build:npm-typestsc --project tsconfig.npm.json --declaration --outDir dist/npm-entry --emitDeclarationOnly --allowJs false --checkJs false
  • bundle-reportDATADOG_TOKEN=test BUNDLE_ANALYSER=true yarn build && run-p bundle-report-entry bundle-report-button bundle-report-mask bundle-report-intro bundle-report-x-storage
  • bundle-report-buttonwebpack-bundle-analyzer --port 4201 dist/embed/button/local/stats.json dist/embed/button
  • bundle-report-entryDATADOG_TOKEN=test BUNDLE_ANALYSER=true yarn build && webpack-bundle-analyzer --port 4200 dist/stats.json dist
  • bundle-report-introwebpack-bundle-analyzer --port 4204 dist/embed/intro/local/stats.json dist/embed/intro/local
  • bundle-report-maskwebpack-bundle-analyzer --port 4203 dist/embed/drawer-mask/local/stats.json dist/embed/drawer-mask/local
  • bundle-report-x-storagewebpack-bundle-analyzer --port 4205 dist/embed/x-storage/local/stats.json dist/embed/x-storage/local
  • check-package-version./check-package-version.sh
  • check-types./node_modules/typescript/bin/tsc --project ./tsconfig.json --noEmit --strict false
  • check-types-strict./node_modules/typescript/bin/tsc --project ./tsconfig.json --noEmit
  • ci-cy-startNODE_ENV=development TS_NODE_PROJECT=wp.tsconfig.json E2E_TEST_ENV=true run-p start:cy-test-page start:frames
  • ci-cypressTS_NODE_PROJECT=wp.tsconfig.json start-server-and-test ci-cy-start http-get://localhost:9001 cypress
  • ci-tc-startE2E_TEST_ENV=true run-p start:tc-test-page start:frames
  • cypresscypress run
  • cypress:opencypress open
  • linttsc --noEmit --strict false && ./node_modules/.bin/eslint --report-unused-disable-directives --ext .js,.jsx,.ts,.tsx . --max-warnings 14
  • lint:fixyarn lint --fix
  • startNODE_ENV=development TS_NODE_PROJECT=wp.tsconfig.json run-p start:example-page start:frames
  • start:cy-test-pageCONTENT_BASE=test/cypress NODE_ENV=development TS_NODE_PROJECT=wp.tsconfig.json webpack serve --config webpack.dev-host-page.ts
  • start:e2e-testrun-p start:e2e-test-page start:frames
  • start:e2e-test-pageCONTENT_BASE=test/e2e webpack serve --config webpack.dev-host-page.ts --hot
  • start:example-pageCONTENT_BASE=example webpack serve --config webpack.dev-host-page.ts --hot
  • start:frameswebpack serve --config webpack.dev.ts --hot
  • testjest --detectOpenHandles
  • test:watchjest --watch
Dependencies11
  • @ada-support/embed-types^1.9.2
  • @ada-support/web-storage^1.2.9
  • @babel/runtime-corejs3^7.26.10
  • @sentry/browser^8.33.0
  • @sentry/types^8.33.1
  • focus-visible^5.2.0
  • json-stable-stringify^1.0.1
  • lodash.debounce^4.0.8
  • lodash.memoize^4.1.2
  • preact10.4.5
  • uniqid^5.3.0