“Improved deep equality testing for Node.js and the browser.”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(DbPo)Md(Pa₅)
Referenced by 10 samples
- benign rucksack-css-1.0.2.tgz fetched
- benign ember-freestyle-0.6.2.tgz fetched
- suspicious github.com-tootsuite-mastodon-v4.5.15+incompatible.zip fetched
- suspicious ember-qunit-3.4.1.tgz fetched
- benign ember-moment-7.5.0.tgz fetched
- benign ember-cli-moment-shim-3.5.0.tgz fetched
- benign github.com-Shopify-grafana-v4.6.5+incompatible.zip fetched
- benign postcss-alias-2.0.0.tgz fetched
- benign ember-link-action-0.1.1.tgz fetched
- benign laggard-2.0.1.tgz fetched
Micro-behaviors
notable severity, 90% confident.
data/control-flow
JavaScript iterates enumerable object keys
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 70% confident.
package/dependencies
npm devDependency pinned to '*'
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
notable severity, 90% confident.
package/quality
Package has ESLint configuration
notable severity, 90% confident.
package/testing/presence
Package uses Karma test runner
baseline severity, 80% confident.
file/profile
English function-word token "and"
baseline severity, 96% confident.
library
Browserify bundled JavaScript module
baseline severity, 100% confident.
package
package.json defines a package version
component severity, 100% confident.
lang
References the JavaScript .length property
supply-chain
notable severity, 80% confident.
install-hook
Package has 'prepublish' hook that runs during install
Identity
| SHA-256 | aa04c16277459bbfb50e1e047e9e0c77d4e78dfafbf1dfc4d0ad86a1f6160dce |
|---|---|
| Canonical SHA-256 | 4ba7a11c9e07ff6b082ae22e143c458acc2c8aac4f10781d74cb6424e43c6fde |
| Filename | [email protected] |
| Package | deep-eql |
| Version | 2.0.2 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/deep-eql/-/deep-eql-2.0.2.tgz |
Timeline
| First seen | 21 Aug 2026 02:04 UTC |
|---|---|
| First analyzed | 21 Aug 2026 02:00 UTC |
| Last analyzed | 23 Aug 2026 19:49 UTC |
| Last updated | 23 Aug 2026 19:50 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 63cf1 |
Not seeing what you expected? Let us know