Recent reports
Latest saved auditsConfiguration
fast-check
One or more npm org slugs (up to 5).
Reports
GitHub+Actions
Publishers to treat as automation. Note: npm cannot distinguish a human from that human’s CI token, so “manual” is a proxy, not proof.
→ audit fast-check | reports: trust,manual
→ scope: ALL org packages
[trust] listing packages in: fast-check
[trust] 11 packages; checking latest release metadata...
[trust] resolved 11/11
[trust] in scope (ALL org packages): 11 packages
[trust] checking trust status (11)...
[trust] trust 11/11
[trust] fetching weekly downloads (7 scoped)...
[trust] downloads 11/11
[trust] provenance=9 trustedPublisher=8 stagedPublish=6 deprecated=2 of 11
[manual] scanning 11 packages for publishes in last 12 months...
[manual] scanned 11/11
[manual] 35 manual publishes (of 35 scanned)
Done.
Live log shows audit progress and warnings.
Report ready 11 package trust rows · 35 manual publishes
Progress over time
Strong trust
72.7% (8) staged or trusted
Any trust
81.8% (9) incl. provenance
No trust signal
18.2% (2) no trust metadata detected
- 9/11 any trust
- 9/11 any trust
- 9/11 any trust
- 9/11 any trust
- 9/11 any trust
- 9/11 any trust
- 9/11 any trust
Audit results
In scope
11
Staged publish
6
Trusted publisher
2
Provenance only
1
No trust signal
2
Deprecated latest
2
| fast-check | 4.10.2 | staged publish | GitHub Actions | 42,558,407 | — | |
| @fast-check/poisoning | 0.3.1 | staged publish | GitHub Actions | 207 | — | |
| @fast-check/vitest | 0.5.0 | staged publish | GitHub Actions | 284,758 | — | |
| @fast-check/jest | 2.3.0 | staged publish | GitHub Actions | 290,550 | — | |
| pure-rand | 8.4.2 | staged publish | GitHub Actions | 61,827,664 | — | |
| @fast-check/packaged | 0.7.1 | staged publish | GitHub Actions | 32 | — | |
| @fast-check/ava | 3.0.1 | trusted publisher | GitHub Actions | 3,060 | — | |
| @fast-check/worker | 0.6.0 | trusted publisher | GitHub Actions | 32 | — | |
| @fast-check/expect-type | 0.2.1 | provenance | ndubien | 30 | DEPRECATED | |
| ava-fast-check | 6.0.0 | none | ndubien | 245 | DEPRECATED | |
| jsverify-to-fast-check | 0.0.3 | none | ndubien | 5 | — |
Manual publishes
35
Total scanned
35
Distinct publishers
1
Excluded bots
1 GitHub+Actions
| GitHub Actions | 35 |
| Sep 19, 2026, 7:34:54 PM UTC | GitHub Actions | fast-check@4.10.2 |
| Sep 15, 2026, 8:00:57 PM UTC | GitHub Actions | fast-check@4.10.1 |
| Sep 11, 2026, 7:53:41 AM UTC | GitHub Actions | @fast-check/poisoning@0.3.1 |
| Sep 11, 2026, 7:53:32 AM UTC | GitHub Actions | @fast-check/vitest@0.5.0 |
| Sep 11, 2026, 7:53:24 AM UTC | GitHub Actions | fast-check@4.10.0 |
| Sep 11, 2026, 7:51:16 AM UTC | GitHub Actions | @fast-check/jest@2.3.0 |
| Jul 10, 2026, 7:55:10 AM UTC | GitHub Actions | pure-rand@8.4.2 |
| Jul 8, 2026, 9:33:03 PM UTC | GitHub Actions | fast-check@4.9.0 |
| Jul 8, 2026, 9:32:51 PM UTC | GitHub Actions | @fast-check/packaged@0.7.1 |
| Jun 25, 2026, 5:10:35 PM UTC | GitHub Actions | pure-rand@8.4.1 |
| May 11, 2026, 10:16:21 PM UTC | GitHub Actions | @fast-check/ava@3.0.1 |
| May 11, 2026, 10:16:13 PM UTC | GitHub Actions | fast-check@4.8.0 |
| Apr 28, 2026, 10:22:05 PM UTC | GitHub Actions | @fast-check/vitest@0.4.1 |
| Apr 17, 2026, 10:06:20 AM UTC | GitHub Actions | fast-check@4.7.0 |
| Apr 3, 2026, 9:48:58 PM UTC | GitHub Actions | @fast-check/vitest@0.4.0 |
| Mar 27, 2026, 3:40:36 PM UTC | GitHub Actions | @fast-check/packaged@0.7.0 |
| Mar 27, 2026, 9:53:40 AM UTC | GitHub Actions | pure-rand@8.4.0 |
| Mar 19, 2026, 10:18:32 PM UTC | GitHub Actions | pure-rand@8.3.0 |
| Mar 16, 2026, 9:43:54 PM UTC | GitHub Actions | pure-rand@8.2.0 |
| Mar 16, 2026, 12:33:46 AM UTC | GitHub Actions | pure-rand@8.1.0 |
| Mar 8, 2026, 1:49:14 PM UTC | GitHub Actions | @fast-check/poisoning@0.3.0 |
| Mar 8, 2026, 1:49:12 PM UTC | GitHub Actions | @fast-check/worker@0.6.0 |
| Mar 8, 2026, 1:49:11 PM UTC | GitHub Actions | @fast-check/vitest@0.3.0 |
| Mar 8, 2026, 1:49:09 PM UTC | GitHub Actions | fast-check@4.6.0 |
| Mar 8, 2026, 1:49:09 PM UTC | GitHub Actions | @fast-check/ava@3.0.0 |
| Mar 8, 2026, 1:49:08 PM UTC | GitHub Actions | @fast-check/packaged@0.6.0 |
| Mar 8, 2026, 1:49:07 PM UTC | GitHub Actions | @fast-check/jest@2.2.0 |
| Mar 5, 2026, 10:04:29 PM UTC | GitHub Actions | pure-rand@8.0.0 |
| Dec 30, 2025, 10:57:10 PM UTC | GitHub Actions | fast-check@4.5.3 |
| Dec 21, 2025, 5:54:17 PM UTC | GitHub Actions | fast-check@4.5.2 |
| Dec 21, 2025, 12:07:39 AM UTC | GitHub Actions | fast-check@4.5.1 |
| Dec 20, 2025, 8:38:25 AM UTC | GitHub Actions | fast-check@4.5.0 |
| Dec 6, 2025, 10:07:50 PM UTC | GitHub Actions | fast-check@4.4.0 |
| Dec 6, 2025, 10:06:36 PM UTC | GitHub Actions | @fast-check/vitest@0.2.4 |
| Nov 1, 2025, 7:10:17 AM UTC | GitHub Actions | @fast-check/vitest@0.2.3 |
“Recency” is the latest dist-tag’s publish time. “Manual” means the publisher isn’t in your bot-exclusion list — npm can’t tell a human session from that account’s automation token.
User publish history
standalone — by npm accountVersions attributed to a specific npm publisher within the window. This scans that account’s maintained packages, optionally combined with packages from the last audit run.