PkgRadar

Package evidence

@wix/[email protected]

Large Javascript Payload: 2271158 bytes

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
2
Versions published
8
First published
Oct 2025
Publisher
wix-ci-publisher

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@wix/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@wix/[email protected]"],"fail_on":"review"}'
Publisherwix-ci-publisher
Artifact bytes234,458
Previous version10.151.0
Published2025-11-18T11:14:18.018Z
SHA-256b5e4dcc00230d757ceccc90f0109927d104f604cae59289b4864491c9ab458d1

Why flagged

What the scanner saw

Large Javascript Payload: 2271158 bytes

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review
Last checked
reviewRisk
10Score
10.152.0Version
Status history (1 event)
  1. new → available · risk review · score 10 · status changed

Evidence

Static findings

1 static · 0 from release diff · showing high-signal first.

SeverityKindPathDetailPoints
mediumLarge Javascript Payloadpackage/generated/proto-generated.cjs2271158 bytes10

Manifest

Package metadata

Scripts10
  • buildyarn prebuild && yarn build:compile && yarn build:copy-csv
  • build:compilerun -T tsc
  • build:copy-csvcp src/codemods/one-ricos-rules.csv dist/codemods/
  • cleanrm -rf dist/*
  • devrun -T tsc --watch
  • lintrun -T eslint 'src/**/*.{js,jsx,ts,tsx,d.ts}' -c ./.eslintrc.cjs
  • prebuildwix-proto-codegen --module . --dir generated --tsClasses --tsExportDefault --stringEnums --filename proto-generated && mv generated/proto-generated.js generated/proto-generated.cjs
  • startrun dev
  • testvitest run --pool=forks
  • test:watchvitest --pool=forks
Dependencies18
  • @wix/ambassador-dx-platform-core-server^3.0.392
  • @wix/http-client^2.47.0
  • @wix/rich-content-services-api^1.2605.0
  • @wix/wix-proto-runtime-toolkit^1.0.660
  • @wix/wix-protobuf-converters^1.0.199
  • cli-highlight^2.1.11
  • find-yarn-workspace-root^2.0.0
  • fp-ts^2.16.5
  • globby^14.0.2
  • ink^4.1.0
  • ink-select-input^5.0.0
  • ink-spinner^5.0.0
  • ink-text-input^5.0.1
  • jscodeshift^0.15.2
  • pastel^2.0.0
  • react^18.0.0
  • semver^7.5.3
  • zod^3.21.4