PkgRadar

Package evidence

@deskpro/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
160Mature · −50% score
First published
Feb 2022
Publisher
jducro

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@deskpro/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@deskpro/[email protected]"],"fail_on":"review"}'
Publisherjducro
Artifact bytes7,020,247
Previous version8.4.0
Published2026-03-04T16:23:46.600Z
SHA-256302edc8646421331a0821220032f5625af152e782e0f9eda09952748ddf3ac03

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
8.4.1Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts34
  • buildpnpm run build:clean && pnpm run build:cjs && pnpm run build:esm && pnpm run build:api-extractor && pnpm run build:copy-assets
  • build-storybookstorybook build --quiet -o build-storybook
  • build:api-extractorpnpm exec api-extractor run --local --verbose
  • build:cjstsc -p ./src/tsconfig.json --outDir ./dist/cjs --module CommonJS --composite false --declarationMap false --declaration false --verbatimModuleSyntax false
  • build:cleanrimraf ./dist && rimraf ./temp
  • build:copy-assetscp -r ./fonts ./dist && cp ./deskpro-ui.css ./dist && cp ./deskpro-custom-icons.css ./dist
  • build:distpnpm run build:clean && pnpm run build:cjs && pnpm run build:esm && pnpm run build:copy-assets
  • build:dist:watchnodemon --watch src --ext ts,tsx --exec pnpm run build:dist
  • build:esmtsc -p ./src/tsconfig.json --outDir ./dist/esm --module ES2022 --composite false --declarationDir ./temp
  • build:watchnodemon --watch src --ext ts,tsx --exec pnpm run build
  • chromaticnpx chromatic --project-token=d616c9f049a7
  • codegentrue
  • docspnpm run docs:storybook && pnpm run docs:typedoc
  • docs:storybookstorybook build --quiet -o docs/storybook
  • docs:typedoctypedoc --out docs/typedoc src/lib.ts
  • generate:dp-custom-iconsfantasticon -c .fantasticonrc.json
  • generate:iconstsc --skipLibCheck ./src/components/IconV2/process.ts && node ./src/components/IconV2/process.js
  • linteslint --max-warnings 0 --ext ts,tsx ./src
  • postpubecho "\x1b[101m\x1b[97mDon't forget to publish updated docs. Rebase the 'docs' branch on main, run 'pnpm run docs' then 'git push'. Docs are published to https://deskpro.github.io/deskpro-ui\x1b[0m"
  • precommitlint-staged
  • pub:majorpnpm run build && npm version major --force && npm publish
  • pub:minorpnpm run build && npm version minor --force && npm publish
  • pub:patchpnpm run build && npm version patch --force && npm publish
  • releasepnpm run build && pnpm exec changeset publish
  • startstorybook dev -p 6006
  • start:storybookstorybook dev -p 6006
  • storybookstorybook dev -p 6006
  • testcross-env NODE_OPTIONS=--max-old-space-size=512 jest --maxWorkers=75%
  • test:cicross-env NODE_OPTIONS=--max-old-space-size=512 jest --maxWorkers=20% --ci
  • test:ci:coveragecross-env NODE_OPTIONS=--max-old-space-size=512 jest --maxWorkers=20% --ci --coverage --changedSince=origin/main
  • …and 4 more.
Dependencies19
  • @fortawesome/fontawesome-svg-core6.7.2
  • @fortawesome/free-solid-svg-icons6.7.2
  • @fortawesome/react-fontawesome0.2.2
  • @heroicons/react^1.0.6
  • @popperjs/core^2.11.0
  • @tippyjs/react^4.2.6
  • d3-hierarchy^3.1.2
  • formik^2.2.9
  • framer-motion^6.2.8
  • pretty-bytes^6.0.0
  • react-highlight-words^0.17.0
  • react-is^18.3.1
  • react-popper^2.2.4
  • simplebar^5.3.6
  • simplebar-react^2.3.6
  • tippy.js^6.3.1
  • ts-pattern^4.0.5
  • use-debounce^7.0.1
  • uuid^8.3.2