Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 1
- First published
- Oct 2023
- Publisher
- lift46252
Recommended action
Looks clean — keep monitoringNo high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@brizy/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@brizy/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Obfuscation Density: high encoded/escaped-token density
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk low · score 0 · status changed
Evidence
Static findings
1 static · 0 from release diff · showing high-signal first.
No high-signal findings — see all findings below.
Show all 1 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| low | Obfuscation Density | package/package-lock.json | high encoded/escaped-token density | 0 |
Manifest
Package metadata
Scripts22
buildnpm run clean && gulp build --prod && npx swc src --config-file .swcrc.json -d lib && tsc -p tsconfig.build.json --emitDeclarationOnlybuild:envNODE_ENV=production webpack --colors --config .webpack/env.jsbuild:iframeNODE_ENV=production webpack --colors --config .webpack/iframe.jscleanrimraf lib/ dist/graphql:codegenrm -rf src/types/graphql* && apollo client:codegen --passthroughCustomScalars --target=typescript --includes=src/**/*.ts --excludes=src/ports/GraphQl/Queries/**/**/*.ts --outputFlat --globalTypesFile=src/types/graphqlEntities.ts --localSchemaFile=schema.graphql src/types/graphqlgraphql:schema:updateapollo service:download --endpoint=${APP_GRAPHQL_ENDPOINT} graphql-schema.json && graphql-introspection-json-to-sdl graphql-schema.json > schema.graphql && rm graphql-schema.jsongraphqlAppointments:codegenrm -rf src/types/AppointmentsGraphql* && apollo client:codegen --passthroughCustomScalars --target=typescript --includes=src/ports/GraphQl/Queries/Appointments/**/*.ts --outputFlat --globalTypesFile=src/types/graphqlEntitiesAppointments.ts --localSchemaFile=schemaAppointments.graphql src/types/AppointmentsGraphqlgraphqlAppointments:schema:updateapollo service:download --endpoint=${APP_APPOINTMENTS_ENDPOINT} graphql-schema.json && graphql-introspection-json-to-sdl graphql-schema.json > schemaAppointments.graphql && rm graphql-schema.jsongraphqlNotifications:codegenrm -rf src/types/NotificationsGraphql* && apollo client:codegen --passthroughCustomScalars --target=typescript --includes=src/ports/GraphQl/Queries/Notifications/**/*.ts --outputFlat --globalTypesFile=src/types/graphqlEntitiesNatifications.ts --localSchemaFile=schemaNotifications.graphql src/types/NotificationsGraphqlgraphqlNotifications:schema:updateapollo service:download --endpoint=${APP_NOTIFICATIONS_ENDPOINT} graphql-schema.json && graphql-introspection-json-to-sdl graphql-schema.json > schemaNotifications.graphql && rm graphql-schema.jsongraphqlShopify:codegenrm -rf src/types/ShopifyGraphql* && apollo client:codegen --passthroughCustomScalars --target=typescript --includes=src/ports/GraphQl/Queries/Shopify/**/*.ts --outputFlat --globalTypesFile=src/types/graphqlEntitiesShopify.ts --localSchemaFile=schemaShopify.graphql src/types/ShopifyGraphqlgraphqlShopify:schema:updateapollo service:download graphql-schema.json --endpoint=${APP_SHOPIFY_ENDPOINT} --header="X-AUTH-USER-TOKEN:${APP_SHOPIFY_TOKEN}" && graphql-introspection-json-to-sdl graphql-schema.json > schemaShopify.graphql && rm graphql-schema.jsongraphqlTranslation:codegenrm -rf src/types/TranslationGraphql* && apollo client:codegen --passthroughCustomScalars --target=typescript --includes=src/ports/GraphQl/Queries/Translations/**/*.ts --outputFlat --globalTypesFile=src/types/graphqlEntitiesTranslation.ts --localSchemaFile=schemaTranslation.graphql src/types/TranslationGraphqlgraphqlTranslation:schema:updateapollo service:download --endpoint=${APP_TRANSLATION_ENDPOINT} graphql-schema.json && graphql-introspection-json-to-sdl graphql-schema.json > schemaTranslation.graphql && rm graphql-schema.jsoni18ni18nextlinteslint . --ext .js,.jsx,.ts,.tsxprettier:checkprettier --config .prettierrc --check "**/*.*"prettier:writeprettier --config .prettierrc --write "**/*.*"startNODE_ENV=development webpack-dev-server --color --config .webpack/env.jsstart:iframeNODE_ENV=development webpack-dev-server --color --config .webpack/iframe.jstestNODE_ENV=test jesttsctsc -p tsconfig-check.json
Dependencies37
@apollo/client^3.1.2@brizy/sylius-sdk^1.2.12@brizy/ui^0.9.44@brizy/ui-acf-icons0.0.7@brizy/ui-flags0.0.5@brizy/ui-icons0.0.43@dnd-kit/core^3.0.1@dnd-kit/sortable^3.0.1@dnd-kit/utilities^2.0.0apollo^2.33.4apollo-upload-client^14.1.1axios^0.27.2date-fns^2.23.0flux-standard-action^2.1.1formik^2.1.4fp-utilities^1.1.2graphql^15.0.0graphql-introspection-json-to-sdl^1.0.3hotkeys-js^3.8.7i18next^21.8.10i18next-chained-backend^3.0.2i18next-http-backend^1.4.1i18next-resources-to-backend^1.0.0jest-canvas-mock^2.5.2ramda^0.27.0react-draggable^4.4.3react-i18next^11.17.2react-redux^7.2.0react-refresh^0.8.3redux^4.0.5- …and 7 more.