Package evidence

@alicloud/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 100
Versions published: 55Mature · −50% score
First published: Nov 2022
Publisher: console-fe

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@alicloud/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@alicloud/[email protected]"],"fail_on":"review"}'

Publisherconsole-fe

Artifact bytes124,430

Previous version1.1.6-beta.12

Published2025-07-14T08:06:54.386Z

SHA-256309ffb11ca3d37fdedee17429e3840fd210353c02fc7eae880b0e6c014f00d33

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

5d agoLast checked

lowRisk

0Score

1.1.7Version

Status history (1 event)

new → available5d ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts8

buildnpm run build:esm && npm run build:cjs && npm run build:types
build:bundlebreezr build --engine webpack
build:cjsbreezr build --engine babel
build:esmbreezr build --engine babel --es-module
build:typestsc -p tsconfig-declaration.json --outDir build/types --declaration --emitDeclarationOnly
cleanrm -rf build
startbreezr start-storybook
testbreezr test:unit

Dependencies27

@alicloud/console-base-conf-account^1.5.9
@alicloud/console-base-conf-env^1.6.10
@alicloud/console-base-conf-parse-env^1.4.4
@alicloud/console-base-conf-product-id^1.4.4
@alicloud/console-base-global^1.4.8
@alicloud/console-base-intl-factory^1.6.9
@alicloud/console-base-log-sls^1.6.16
@alicloud/console-base-rc-button^1.8.2
@alicloud/console-base-rc-dialog^1.10.5
@alicloud/console-base-rc-flex^1.4.11
@alicloud/console-base-rc-icon^1.10.6
@alicloud/console-base-rc-input^1.7.2
@alicloud/console-base-rc-tabs^1.8.10
@alicloud/console-base-rc-tooltip^1.1.12
@alicloud/console-base-theme^1.9.7
@alicloud/console-fetcher-risk-data^1.0.5
@alicloud/console-logger-sls^1.5.9
@alicloud/console-mobile-jsbridge-iframe^1.0.1
@alicloud/fetcher^1.7.9
@alicloud/fetcher-demo-helpers^1.4.10
@alicloud/logger-sls^1.13.2
@alicloud/sandbox-escape^1.1.8
@alicloud/ua^1.4.9
@simplewebauthn/browser^4.1.0
compare-versions^4.1.4
lodash-es^4.17.21
react-transition-group^4.4.5