Recent reports
Latest saved auditsConfiguration
testing-library
One or more npm org slugs (up to 5).
Reports
GitHub Actions
Publishers to treat as automation. Note: npm cannot distinguish a human from that human’s CI token, so “manual” is a proxy, not proof.
→ audit testing-library | reports: trust
→ scope: ALL org packages
[trust] listing packages in: testing-library
[trust] 19 packages; checking latest release metadata...
[trust] resolved 19/19
[trust] in scope (ALL org packages): 19 packages
[trust] checking trust status (19)...
[trust] trust 19/19
[trust] fetching weekly downloads (19 scoped)...
[trust] downloads 19/19
[trust] provenance=8 trustedPublisher=8 stagedPublish=0 deprecated=1 of 19
Done.
Live log shows audit progress and warnings.
Report ready 19 package trust rows
Progress over time
Strong trust
42.1% (8) staged or trusted
Any trust
42.1% (8) incl. provenance
No trust signal
57.9% (11) no trust metadata detected
- 8/19 any trust
- 8/19 any trust
- 8/19 any trust
- 8/19 any trust
- 8/19 any trust
- 8/19 any trust
- 8/19 any trust
- 8/19 any trust
- 8/19 any trust
- 7/19 any trust
- 7/19 any trust
- 7/19 any trust
- 7/19 any trust
- 7/19 any trust
- 7/19 any trust
- 7/19 any trust
- 7/19 any trust
Audit results
In scope
19
Staged publish
0
Trusted publisher
8
Provenance only
0
No trust signal
11
Deprecated latest
1
| @testing-library/user-event | 14.6.8 | trusted publisher | GitHub Actions | 58,829,442 | — | |
| @testing-library/react-native | 14.1.0 | none | mdjastrzebski | 4,390,151 | — | |
| @testing-library/dom | 10.4.2 | trusted publisher | GitHub Actions | 85,373,769 | — | |
| @testing-library/angular | 19.5.0 | trusted publisher | GitHub Actions | 287,657 | — | |
| @testing-library/react | 16.3.3 | trusted publisher | GitHub Actions | 70,309,317 | — | |
| @testing-library/jest-dom | 7.0.1 | trusted publisher | GitHub Actions | 73,843,594 | — | |
| @testing-library/svelte | 5.4.2 | trusted publisher | GitHub Actions | 956,368 | — | |
| @testing-library/svelte-core | 1.1.3 | trusted publisher | GitHub Actions | 1,084,198 | — | |
| @testing-library/cypress | 10.1.3 | trusted publisher | GitHub Actions | 1,173,205 | — | |
| @testing-library/react-render-stream | 2.0.2 | none | testing-library-bot | 9,802 | — | |
| @testing-library/preact | 3.2.4 | none | testing-library-bot | 332,984 | — | |
| @testing-library/vue | 8.1.0 | none | testing-library-bot | 826,377 | — | |
| @testing-library/testcafe | 5.0.1 | none | testing-library-bot | 79,280 | — | |
| @testing-library/jest-native | 5.4.3 | none | testing-library-bot | 667,992 | DEPRECATED | |
| @testing-library/jasmine-dom | 1.3.3 | none | testing-library-bot | 16,479 | — | |
| @testing-library/webdriverio | 3.2.1 | none | testing-library-bot | 19,127 | — | |
| @testing-library/react-hooks | 8.0.1 | none | testing-library-bot | 2,367,972 | — | |
| @testing-library/preact-hooks | 1.1.0 | none | cmckinstry | 12,702 | — | |
| @testing-library/nightwatch | 2.0.0 | none | benmonro | 49 | — |
“Recency” is the latest dist-tag’s publish time. “Manual” means the publisher isn’t in your bot-exclusion list — npm can’t tell a human session from that account’s automation token.
User publish history
standalone — by npm accountVersions attributed to a specific npm publisher within the window. This scans that account’s maintained packages, optionally combined with packages from the last audit run.