PkgRadar

Package evidence

@applitools/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
296Mature · −50% score
First published
Sep 2022
Publisher
movsho

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@applitools/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@applitools/[email protected]"],"fail_on":"review"}'
Publishermovsho
Artifact bytes141,902
Previous version4.64.0
Published2026-06-09T10:26:07.526Z
SHA-256bbd612d3725bbb1ddf79ec719d0825cc60064538417192dae0cb1ae811c83bf5

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
4.64.1Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts15
  • buildyarn build:dist
  • build:distrun --top-level tsc --project ./tsconfig.build.json
  • lintrun --top-level eslint '**/*.ts'
  • playwright:setupnode -e "var v=parseInt(process.version.slice(1));if(v>=18){require('child_process').execSync('yarn playwright install --with-deps firefox',{stdio:'inherit'})}else{console.log('Skipping playwright install (Node '+process.version+')')}"
  • setuprun --top-level browsers:setup && run --top-level xvfb:setup && run playwright:setup
  • setup:standalonesh -c 'yarn chromedriver --port=4444 --verbose &'
  • testrun --top-level mocha './test/**/*.spec.ts' --exclude 'test/e2e/mocha-sync/**' --parallel --jobs ${MOCHA_JOBS:-15} --exit --require ./test/mocha-global-setup.js
  • test:binMOCHA_GROUP=bin run --top-level mocha './test/bin/**/*.spec.ts' --parallel --jobs ${MOCHA_JOBS:-15} --require ./test/mocha-global-setup.js
  • test:e2eMOCHA_OMIT_TAGS=http2 MOCHA_GROUP=e2e run --top-level mocha './test/e2e/**/*.spec.ts' --exclude 'test/e2e/mocha-sync/**' --parallel --jobs ${MOCHA_JOBS:-15} --exit --require ./test/mocha-global-setup.js
  • test:e2e:http2APPLITOOLS_HTTP_VERSION=2 MOCHA_OMIT_TAGS=http1,sauce,browserstack MOCHA_GROUP=e2e run --top-level mocha './test/e2e/**/*.spec.ts' --exclude 'test/e2e/mocha-sync/**' --parallel --jobs ${MOCHA_JOBS:-15} --exit --require ./test/mocha-global-setup.js
  • test:e2e:syncMOCHA_GROUP=e2e SYNC=true run --top-level mocha './test/e2e/mocha-sync/**/*.spec.ts' --exit --require ./test/mocha-global-setup.js
  • test:itMOCHA_GROUP=it run --top-level mocha './test/it/**/*.spec.ts' --require ./test/mocha-global-setup.js
  • test:localMOCHA_OMIT_TAGS=sauce,browserstack run test
  • test:sauceMOCHA_ONLY_TAGS=sauce,browserstack run test
  • test:unitMOCHA_GROUP=unit run --top-level mocha './test/unit/**/*.spec.ts' --require ./test/mocha-global-setup.js
Dependencies18
  • @applitools/core-base1.35.1
  • @applitools/dom-capture11.8.1
  • @applitools/dom-snapshot4.17.2
  • @applitools/driver1.26.2
  • @applitools/ec-client1.12.32
  • @applitools/logger2.2.12
  • @applitools/nml-client1.11.30
  • @applitools/req1.11.0
  • @applitools/screenshoter3.12.21
  • @applitools/snippets2.9.2
  • @applitools/socket1.3.13
  • @applitools/ufg-client1.22.3
  • @applitools/utils1.14.5
  • abort-controller3.0.0
  • chalk4.1.2
  • node-fetch2.6.7
  • semver7.6.2
  • throat6.0.2