PkgRadar

Package evidence

[email protected]

no findings

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
16
Versions published
19Established · −30% score
First published
Nov 2025
Publisher
haimdx

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
Publisherhaimdx
Artifact bytes405,549
Previous version1.9.0
Published2026-06-16T10:36:53.061Z
SHA-2564dc96123b657253f3646dbd6f8a2a412f8baf18679f37d04ce3fa3d6220abf81

Why flagged

What the scanner saw

No high-signal static finding in the saved report.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low
Last checked
lowRisk
0Score
1.10.0Version
Status history (1 event)
  1. new → available · risk low · score 0 · status changed

Evidence

Static findings

No findings stored for this release.

Manifest

Package metadata

Scripts32
  • appium-homerm -rf rm -rf /tmp/tractive-device-farm && export APPIUM_HOME=/tmp/tractive-device-farm
  • buildnpx tsc -b && npm run copy-files
  • build:docsappium-docs build --reference=false
  • buildAndCopyWebsh buildAndCopyWeb.sh
  • clear-cacherm -rf $HOME/.cache/appium-device-farm
  • copy-filescp -R src/public lib
  • coveragenyc npm run test
  • install-docs-depsappium-docs init --no-mkdocs -e lib/index.js
  • install-driver-androidexport APPIUM_HOME=/tmp/tractive-device-farm && appium driver install [email protected]
  • install-driver-iosexport APPIUM_HOME=/tmp/tractive-device-farm && appium driver install [email protected]
  • install-pluginnpm run build && appium plugin install --source=local $(pwd)
  • integration-androidmocha -r ts-node/register ./test/integration/androidDevices.spec.js --timeout 90000 --exit
  • integration-iosmocha -r ts-node/register ./test/integration/*iOS*.spec.js --timeout 260000 --exit
  • linteslint . --ext .ts,.tsx --fix
  • prepublishnpx tsc && npm run copy-files
  • prettierprettier 'src/**/*.ts' 'web/**/*.ts' 'web/**/*.tsx' --write --single-quote
  • publish:docsappium-docs build --deploy --push -b docs-site -m 'docs: auto-build docs for appium-device-farm@%s' --alias latest
  • reinstall-pluginexport APPIUM_HOME=/tmp/tractive-device-farm && npm run appium-home && (appium plugin uninstall device-farm || exit 0) && npm run install-plugin
  • releasebash publish.sh
  • run-serverexport APPIUM_HOME=/tmp/tractive-device-farm && appium plugin list --installed && appium server -ka 800 --log-timestamp --use-plugins=tractive-appium-device-farm -pa /wd/hub --plugin-tractive-appium-device-farm-platform=both --plugin-tractive-appium-device-farm-auth
  • testmocha -r ts-node/register ./test/unit/*.spec.js --plugin-device-farm-platform=both --exit --timeout=10000
  • test-e2ewait-on http://localhost:31337/device-farm/ && mocha --require ts-node/register ./test/e2e/plugin.spec.js --timeout 999999
  • test-e2e-browserstackwait-on http://localhost:31337/device-farm/ && mocha --require ts-node/register ./test/e2e/browserstack.spec.js --timeout 999999
  • test-e2e-pCloudywait-on http://localhost:31337/device-farm/ && mocha --require ts-node/register ./test/e2e/pcloudy.spec.js --timeout 999999
  • test-jestNODE_OPTIONS=--experimental-vm-modules npx jest ./test/unit/AndroidDeviceManager.spec.js
  • test-parallel-androidmocha --require ts-node/register -p ./test/e2e/android/conf.spec.js --timeout 260000
  • test-parallel-bswait-on http://localhost:31337/device-farm/ && mocha --require ts-node/register -p ./test/e2e/android/cloud/conf.spec.js --timeout 260000
  • test-parallel-iosmocha --require ts-node/register -p ./test/e2e/ios/conf1.spec.js --timeout 260000
  • test-parallel-ltwait-on http://localhost:31337/device-farm/ && mocha --require ts-node/register -p ./test/e2e/android/cloud/lambdaTest.spec.js --timeout 260000
  • test-parallel-pcloudywait-on http://localhost:31337/device-farm/ && mocha --require ts-node/register -p ./test/e2e/android/cloud/pcloudy.spec.js --timeout 260000
  • …and 2 more.
Dependencies45
  • @appium/base-plugin^2.2.22
  • @appium/types^0.14.1
  • @devicefarmer/adbkit^3.2.5
  • @types/multer^2.1.0
  • @types/node-persist^3.1.5
  • app-info-parser^1.1.6
  • appium-adb^11.0.3
  • appium-chromedriver^5.6.19
  • appium-ios-device^2.7.6
  • async-lock^1.2.8
  • async-wait-until^2.0.12
  • axios^0.27.2
  • bcryptjs^3.0.3
  • better-sqlite3^12.11.1
  • bplist-parser^0.3.2
  • cors^2.8.5
  • download^8.0.0
  • express^4.17.3
  • fs-extra^11.1.1
  • get-port^5.1.1
  • http-proxy-agent7.0.0
  • http-proxy-middleware^2.0.6
  • https-proxy-agent7.0.2
  • ip^1.1.8
  • jsonschema1.4.1
  • lodash^4.17.21
  • lokijs^1.5.12
  • multer^2.1.1
  • node-abort-controller^3.1.1
  • node-cache^5.1.2
  • …and 15 more.