@applitools/dom-snapshot

Build provenancecaution

The release has no build attestation and does not use staged publishing, so the artifact-to-source path is less verifiable despite the package's strong release cadence.

Maintainerscaution

Most publish-access accounts use the applitools.com domain, consistent with organization backing, but eight consumer-domain accounts remain account-hygiene concerns: yotammadem, ormeda, clementbarry, gofilord, grayscale64, dockermaster, anandbagmar, and adamcarmi.

Project backingcaution

The package uses the @applitools registry namespace, but the linked repository is owned by the user account amitzur rather than an organization, weakening the visible backing connection.

Repo commit activitycaution

The linked repository had zero commits and zero active maintainers in the last three months, weakening confidence that it represents an actively maintained source project.

Repo package mentioncaution

The linked CSSOM repository neither matches @applitools/dom-snapshot nor mentions the package in its README, which suggests the source link may be unrelated or piggy-backing on another project.