Package evidence

@okta/[email protected]

Obfuscation Density: high encoded/escaped-token density

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 873
Versions published: 164Mature · −50% score
First published: Jun 2022
Publisher: oktauploader

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@okta/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@okta/[email protected]"],"fail_on":"review"}'

Publisheroktauploader

Artifact bytes6,505,989

Previous version1.54.0

Published2026-03-04T22:32:42.517Z

SHA-256a7946503ead0dbb80fc93f2fc050aa53fef22a17b5acb4a3d86c7a8dc6292124

Why flagged

What the scanner saw

Obfuscation Density: high encoded/escaped-token density

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

27h agoLast checked

lowRisk

0Score

1.55.0Version

Status history (1 event)

new → available27h ago · risk low · score 0 · status changed

Evidence

Static findings

2 static · 0 from release diff · showing high-signal first.

No high-signal findings — see all findings below.

Show all 2 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
low	Obfuscation Density	package/dist/sb-addons/storybook-6/manager-bundle.js	high encoded/escaped-token density	0
low	Large Javascript Payload	package/dist/sb-manager/globals-runtime.js	3152157 bytes	0

Manifest

Package metadata

Scripts26

buildyarn build:clean && yarn build:i18n:ts && yarn build:types && yarn build:source && yarn build:testSelectors
build:cleanrimraf dist
build:i18n:tsodyssey-cli i18n build:ts
build:sourceyarn build:source:esm && yarn build:source:cjs
build:source:cjsODYSSEY_BUILD_MODE=cjs NODE_ENV=production BROWSERSLIST_ENV=modern babel src --out-dir dist/cjs --extensions .js,.jsx,.ts,.tsx --source-maps --out-file-extension .cjs
build:source:esmODYSSEY_BUILD_MODE=esm NODE_ENV=production BROWSERSLIST_ENV=modern babel src --out-dir dist/esm --extensions .js,.jsx,.ts,.tsx --source-maps
build:testSelectorstsx scripts/generateTestSelectorsJson.ts
build:typestsc --project tsconfig.production.json
ci:coverageNODE_ENV=test yarn vitest run --coverage --reporter=default
devyarn concurrently npm:dev:i18n:ts npm:dev:types npm:dev:source
dev:coverageNODE_ENV=test yarn vitest --coverage
dev:i18n:tsyarn build:i18n:ts --watch
dev:sourceyarn build:source:esm --watch
dev:testNODE_ENV=test vitest --reporter=verbose
dev:typesyarn build:types --watch
generate:i18nodyssey-cli i18n generate
generate:i18n:pseudoLocalePropertiesodyssey-cli i18n generate:pseudoLocaleProperties
generate:iconsyarn generate:icons:clean && yarn generate:icons:components && yarn generate:icons:index
generate:icons:cleanrimraf src/icons.generated && rimraf src/icons.generated/index.ts
generate:icons:componentssvgr ../odyssey-icons/dist/icons --out-dir ./src/icons.generated
generate:icons:indextsx scripts/generateIconsIndex.ts
generate:webComponentVersiontsx scripts/updateWebComponentVersion.ts
playwright-installyarn playwright install --with-deps chromium
testNODE_ENV=test vitest run --reporter=default
test:downstreamyarn ok-ui downstream
typechecktsc --noEmit --rootDir ./

Dependencies23

@dnd-kit/core6.0.3
@dnd-kit/sortable7.0.0
@dnd-kit/utilities3.2.0
@emotion/cache^11.14.0
@emotion/react^11.14.0
@emotion/styled^11.14.0
@mui/icons-material^5.18.0
@mui/lab^5.0.0-alpha.175
@mui/material^5.18.0
@mui/system^5.18.0
@mui/utils^5.17.1
@mui/x-date-pickers^7.2.0
@okta/odyssey-contribution-tooling1.55.0
@okta/odyssey-design-tokens1.55.0
@types/luxon^3.4.2
date-fns^2.30.0
dom-accessibility-api^0.7.0
lodash.isequal^4.5.0
luxon^3.4.4
material-react-table^2.11.3
react-error-boundary^4.1.1
react-window^1.8.10
word-wrap^1.2.5