@applitools/dom-snapshot

Repo package mentiondanger

The linked repository is named CSSOM and neither matches @applitools/dom-snapshot nor mentions the package in its README, creating a material risk that the source repository is unrelated.

Build provenancecaution

No build attestation or staged publishing evidence is available, limiting release transparency; this is partly offset by the package's long release history and active cadence.

Maintainerscaution

Most publish-access accounts use the applitools.com domain, consistent with organization backing, but several Gmail and Outlook accounts remain tied to publishing: yotammadem, ormeda, clementbarry, gofilord, grayscale64, dockermaster, anandbagmar, and adamcarmi.

Project backingcaution

The package uses the @applitools namespace, but the linked repository is owned by the individual account amitzur rather than an organization, so the repository does not clearly demonstrate project backing.

Repo commit activitycaution

The linked repository had zero commits and zero active maintainers in the last three months, conflicting with the package's frequent registry releases and weakening confidence in the source link.