PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
3,868Niche · −30% score
Versions published
920Mature · −50% score
First published
May 2022
Publisher
purecloud

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisherpurecloud
Artifact bytes4,409,658
Previous version4.250.0
Published2026-06-10T02:39:51.182Z
SHA-256037411c1367b72dcc20c3b70c4a604db91148f743e0a013ac0be7a17ae824812

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
4.250.1Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts39
  • buildnpm run clean && npm run i18n && npm run build-themes && npm run generate-gux-icon-types-file && npm run stencil && npm run build-wrapper
  • build-i18n./scripts/build-i18n.js
  • build-themes./scripts/build-themes.js
  • build-wrapper./scripts/wrap-stencil.js
  • check-a11ynode ./scripts/check-a11y.mjs
  • check-readmes./scripts/check-readmes.sh
  • cleanrm -r ./dist ./build || true
  • devnpm run stencil.dev
  • eslinteslint . --fix
  • generate-flags-sprite-file./scripts/generate-flags-sprite-file.js
  • generate-gux-icon-types-file./scripts/generate-gux-icon-types-file.js
  • generate-start-of-week-file./scripts/generate-start-of-week-file.js
  • generate-versions-file./scripts/generate-versions-file.mjs
  • i18nnpm run update-en-i18n && npm run build-i18n && npm run generate-start-of-week-file
  • lint-allnpm-run-all "stylelint" "eslint" "prettier-package-json" "svgo"
  • lint-stagedlint-staged --concurrent false
  • list-checked-a11y-componentsnode scripts/list-checked-a11y-components.js
  • list-component-tracking./scripts/list-component-tracking.js
  • list-i18n-files./scripts/list-i18n-files.js
  • list-light-dom-components./scripts/list-light-dom-components.js
  • list-shadow-explicitly-set./scripts/list-shadow-explicitly-set.js
  • list-spec-files./scripts/list-spec-files.js
  • predevnpm run i18n && npm run build-themes && npm run generate-gux-icon-types-file
  • predev.publicnpm run predev
  • preparenpm run i18n
  • prettier-package-jsonprettier-package-json --write ./package.json
  • stencilstencil build --prod
  • stencil.devstencil build --dev --watch --serve --no-open
  • stylelintstylelint --fix "**/*.{css,html,scss}"
  • svgofind ./src/components/stable/gux-icon/icons/**/*.svg -type f ! -path '*/legacy/*' ! -path '*/brand/*' -exec svgo {} +
  • …and 9 more.
Dependencies7
  • @floating-ui/dom1.7.6
  • @js-temporal/polyfill0.5.1
  • @vvo/tzdb6.198.0
  • google-libphonenumber3.2.44
  • intl-messageformat11.2.7
  • requestanimationframe-timer3.0.3
  • sortablejs1.15.7