Package evidence

@woocommerce/[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 103
Versions published: 6
First published: Nov 2023
Publisher: nathanowna

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@woocommerce/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@woocommerce/[email protected]"],"fail_on":"review"}'

Publishernathanowna

Artifact bytes412,289

Previous version1.4.0

Published2024-04-12T16:24:45.852Z

SHA-2569a671b6aac61116bb20f8876f88883290a80a54db186b24087b01f500e2af3b9

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

3d agoLast checked

lowRisk

0Score

1.5.0Version

Status history (1 event)

new → available3d ago · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts16

buildpnpm --if-present --workspace-concurrency=Infinity --stream --filter="$npm_package_name..." '/^build:project:.*$/'
build:projectpnpm --if-present '/^build:project:.*$/'
build:project:bundlewireit
build:project:cjswireit
build:project:esmwireit
changelogcomposer install && composer exec -- changelogger
lintpnpm --if-present '/^lint:lang:.*$/'
lint:fixpnpm --if-present '/^lint:fix:lang:.*$/'
lint:fix:lang:jseslint src --fix
lint:lang:jseslint src
test:jsjest --config ./jest.config.json --passWithNoTests
watch:buildpnpm --if-present --workspace-concurrency=Infinity --filter="$npm_package_name..." --parallel '/^watch:build:project:.*$/'
watch:build:projectpnpm --if-present run '/^watch:build:project:.*$/'
watch:build:project:bundlewireit
watch:build:project:cjswireit
watch:build:project:esmwireit

Dependencies44

@types/lodash^4.14.202
@types/prop-types^15.7.11
@types/wordpress__blocks11.0.7
@woocommerce/admin-layout1.1.0
@woocommerce/block-templates1.1.0
@woocommerce/components12.2.0
@woocommerce/currency4.2.0
@woocommerce/customer-effort-score2.2.0
@woocommerce/data4.1.0
@woocommerce/experimental3.2.0
@woocommerce/expression-evaluation1.0.0
@woocommerce/navigation^8.1.0
@woocommerce/number2.4.0
@woocommerce/settings^1.0.0
@woocommerce/tracks^1.3.0
@wordpress/api-fetchwp-6.0
@wordpress/block-editor^9.8.0
@wordpress/blocks^12.24.0
@wordpress/componentswp-6.0
@wordpress/composewp-6.0
@wordpress/core-datawp-6.0
@wordpress/datawp-6.0
@wordpress/datewp-6.0
@wordpress/deprecatedwp-6.0
@wordpress/edit-postwp-6.0
@wordpress/editorwp-6.0
@wordpress/elementwp-6.0
@wordpress/hookswp-6.0
@wordpress/html-entitieswp-6.0
@wordpress/i18nwp-6.0
…and 14 more.