Package evidence

@algolia/[email protected]

Obfuscation Density: high encoded/escaped-token density

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published: 357Mature · −50% score
First published: Apr 2019
Publisher: CircleCI

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@algolia/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@algolia/[email protected]"],"fail_on":"review"}'

PublisherCircleCI

Artifact bytes405,438

Previous version2.13.1

Published2026-06-11T13:42:13.869Z

SHA-2560c69010ce1a136c8758813ee0043dc90b73e4c9db95af85b7a98065a52df083b

Why flagged

What the scanner saw

Obfuscation Density: high encoded/escaped-token density

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

9h agoLast checked

lowRisk

0Score

2.14.0Version

Status history (1 event)

new → available9h ago · risk low · score 0 · status changed

Evidence

Static findings

1 static · 0 from release diff · showing high-signal first.

No high-signal findings — see all findings below.

Show all 1 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
low	Obfuscation Density	package/dist/cjs/Helpers/TextWrap/TextWrap.js	high encoded/escaped-token density	0

Manifest

Package metadata

Scripts21

accessibilityyarn build:storybook && yarn clean-reports && run-p -r serve:storybook test-storybook
buildcross-env NODE_ENV=production run-p build:types build:js build:css build:scss
build:_jsbabel src --extensions ".ts,.tsx,.js" --ignore "src/**/*.d.ts,src/**/*.stories.tsx,src/**/*.test.ts,src/**/*.test.tsx"
build:cjscross-env BABEL_MODULE_TYPE=CJS yarn build:_js --out-dir dist/cjs
build:csscross-env NODE_ENV=production postcss -o dist/satellite.min.css src/styles/satellite.css
build:esmcross-env BABEL_MODULE_TYPE=ESM yarn build:_js --out-dir dist/esm
build:jsrun-p build:esm build:cjs
build:scssnode ./scripts/build-scss-variables.js
build:storybookstorybook build -o .storybook-static
build:typesnode ./scripts/build-types.js
chromaticcross-env NODE_ENV=storybook chromatic --build-script-name build:storybook --exit-zero-on-changes --auto-accept-changes master --exit-once-uploaded
cleanrimraf dist
clean-reportsrimraf .reports
devstorybook dev -p 6060
linteslint --rulesdir ./.eslint_rules/ 'src/**/*.{ts,tsx}'
qualityrun-s test type-check lint
serve:storybookhttp-server .storybook-static -s -p 6060
testjest --config jest.config.ts --runInBand --coverage
test-storybookwait-on tcp:6060 && test-storybook --url http://localhost:6060 --maxWorkers=2 && yarn test-storybook-process-reports
test-storybook-process-reportsnode ./scripts/process-reports.js
type-checktsc --noEmit

Dependencies38

@babel/runtime^7.21.0
@monaco-editor/react^4.6.0
@popperjs/core^2.4.4
@radix-ui/react-accordion1.2.2
@radix-ui/react-avatar1.1.2
@radix-ui/react-collapsible1.1.2
@radix-ui/react-dialog1.1.4
@radix-ui/react-dropdown-menu2.1.4
@radix-ui/react-popover1.1.4
@radix-ui/react-progress1.1.1
@radix-ui/react-separator1.1.1
@radix-ui/react-slider1.2.2
@radix-ui/react-slot1.1.1
@radix-ui/react-tabs1.1.2
@radix-ui/react-toast1.2.4
@radix-ui/react-toggle1.1.1
@radix-ui/react-toggle-group1.1.1
@radix-ui/react-tooltip1.1.6
@radix-ui/react-visually-hidden1.1.1
@tailwindcss/container-queries^0.1.1
clsx^2.0.0
color^4.2.3
date-fns^2.29.3
diacritics^1.3.0
downshift^8
lodash^4.17.21
lucide-react^0.561.0
react-day-picker^8.0.7
react-dropzone^11.7.1
react-markdown^10.1.0
…and 8 more.