PkgRadar

Package evidence

@applitools/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
24,110Mainstream · −50% score
Versions published
364Mature · −50% score
First published
Feb 2019
Publisher
movsho

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@applitools/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@applitools/[email protected]"],"fail_on":"review"}'
Publishermovsho
Artifact bytes93,994
Previous version3.65.5
Published2026-06-09T10:26:44.158Z
SHA-256d6330393d47422b6b876e14b4f37e14461c21bfabeb3a8f08f998d6c188e5b37

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
3.65.6Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts31
  • buildrollup -c rollup.config.js && yarn build:types
  • build:heavynode scripts/bitmap.js
  • build:typestsc --project tsconfig.types.json
  • changeloggit changelog -x -p -f v$npm_package_version > History.md && git add ./History.md && git commit -am 'changelog'
  • changelog:initgit config changelog.format "* %s [[%h]($(echo $npm_package_repository_url|cut -d+ -f2|cut -d. -f1-2)/commit/%H)]"
  • changelog:installsudo apt-get install git-extras
  • eyes-storybooknode bin/eyes-storybook.js -f test/fixtures/applitools.config.js
  • eyes-storybook:configurednode bin/eyes-storybook.js -f scripts/preconfigured.config.js
  • eyes-storybook:csf-storyStore7node bin/eyes-storybook.js -f test/fixtures/storybook-storyStore7/applitools.config.js
  • eyes-storybook:heavynode bin/eyes-storybook.js -f test/fixtures/heavyStorybook/applitools.config.js
  • eyes-storybook:httpHeadersnode bin/eyes-storybook.js -f test/fixtures/appWithCustomHttpHeaders/applitools.config.js
  • eyes-storybook:jslayoutnode bin/eyes-storybook.js -f test/e2e/happy-config/layout-breakpoints-local.config.js
  • eyes-storybook:zeroStoriesnode bin/eyes-storybook.js -f test/fixtures/zeroStoriesRetry/applitools.config.js
  • lintrun --top-level eslint '**/*.js'
  • storybookstart-storybook -c test/fixtures/appWithStorybook -p 9001 -s test/fixtures
  • storybook:csfstart-storybook -c test/fixtures/storybook-versions/latest/.storybook -p 9001
  • storybook:csf-storyStore7start-storybook -c test/fixtures/storybook-storyStore7/.storybook/ -p 9004 -s test/fixtures/
  • storybook:heavystart-storybook -c test/fixtures/heavyStorybook -p 9002 -s test/fixtures
  • storybook:httpHeadersstart-storybook -c test/fixtures/appWithCustomHttpHeaders -p 9007
  • storybook:jslayoutstart-storybook -c test/fixtures/jsLayoutStorybookLocal -p 9001 -s test/fixtures
  • storybook:zeroStoriesstart-storybook -c test/fixtures/zeroStoriesRetry -p 9003 -s test/fixtures
  • testyarn build && yarn test:mocha
  • test:e2eMOCHA_GROUP=e2e run --top-level mocha 'test/e2e/*.e2e.test.js' --require ./test/mocha-global-setup.js
  • test:e2e:versionsMOCHA_GROUP=e2e_versions run --top-level mocha test/versions/*.e2e.versions.test.js
  • test:heavynode bin/eyes-storybook.js -f test/fixtures/heavyStorybook/applitools.config.js
  • test:itrun --top-level mocha 'test/it/*.test.js'
  • test:mocharun --top-level mocha 'test/{unit,it,e2e}/*.test.js' --require ./test/mocha-global-setup.js
  • test:sanityrun --top-level mocha 'test/sanity/*.test.js'
  • test:unitrun --top-level mocha 'test/unit/*.test.js' --require ./test/mocha-global-setup.js
  • test:versionsyarn build && yarn test:e2e:versions && yarn lint
  • …and 1 more.
Dependencies20
  • @applitools/core4.64.1
  • @applitools/driver1.26.2
  • @applitools/eyes1.43.1
  • @applitools/functional-commons1.6.0
  • @applitools/logger2.2.12
  • @applitools/monitoring-commons1.0.19
  • @applitools/spec-driver-puppeteer1.8.2
  • @applitools/ufg-client1.22.3
  • @applitools/utils1.14.5
  • @inquirer/prompts7.0.1
  • boxen4.2.0
  • chalk3.0.0
  • detect-port1.3.0
  • lodash^4.18.0
  • ora3.4.0
  • puppeteer24.11.1
  • semver7.6.2
  • strip-ansi6.0.0
  • throat6.0.2
  • yargs17.7.2