Summary
Togoder Security scanned the npm package axobject-query@4.1.0 on Oct 6, 2026. An AI review of 131 source files produced no findings. No malicious behavior, install-time payloads, credential theft or exfiltration were identified.
0
critical
0
high
0
medium
0
low
Findings
No findings. The reviewer saw nothing malicious or risky in this version.
Files reviewed
| File | Verdict | What the reviewer saw |
|---|---|---|
| lib/AXObjectElementMap.js | safe | No malicious patterns detected; code is a standard Babel-transpiled utility for mapping accessibility objects. |
| lib/AXObjectRoleMap.js | safe | No malicious patterns detected |
| lib/AXObjectsMap.js | safe | No malicious patterns detected; the file is a benign accessibility object role registry with no network, filesystem, process, or dynamic code execution activity. |
| lib/elementAXObjectMap.js | safe | No malicious patterns detected; the code is a benign Babel-transpiled utility that builds a lookup map from static AXObject definition data without any network, filesystem, process, or dynamic execution activity. |
| lib/etc/objects/AbbrRole.js | safe | No malicious patterns detected |
| lib/etc/objects/AlertDialogRole.js | safe | No malicious patterns detected |
| lib/etc/objects/AlertRole.js | safe | No malicious patterns detected |
| lib/etc/objects/AnnotationRole.js | safe | No malicious patterns detected in the analyzed file. |
| lib/etc/objects/ApplicationRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ArticleRole.js | safe | No malicious patterns detected |
| lib/etc/objects/AudioRole.js | safe | No malicious patterns detected |
| lib/etc/objects/BannerRole.js | safe | No malicious patterns detected |
| lib/etc/objects/BlockquoteRole.js | safe | No malicious patterns detected |
| lib/etc/objects/BusyIndicatorRole.js | safe | No malicious patterns detected; the file only defines a static accessibility role descriptor with no network, filesystem, process, or dynamic code activity. |
| lib/etc/objects/ButtonRole.js | safe | The file contains only static configuration data defining ARIA/HTML button role concepts; no malicious patterns or executable code detected. |
| lib/etc/objects/CanvasRole.js | safe | No malicious patterns detected |
| lib/etc/objects/CaptionRole.js | safe | No malicious patterns detected |
| lib/etc/objects/CellRole.js | safe | No malicious patterns detected |
| lib/etc/objects/CheckBoxRole.js | safe | No malicious patterns detected; the file is a simple static role definition for a checkbox accessibility widget. |
| lib/etc/objects/ColorWellRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ColumnHeaderRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ColumnRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ComboBoxRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ComplementaryRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ContentInfoRole.js | safe | No malicious patterns detected |
Show 106 more files
| File | Verdict | What the reviewer saw |
|---|---|---|
| lib/etc/objects/DateRole.js | safe | No malicious patterns detected |
| lib/etc/objects/DateTimeRole.js | safe | No malicious patterns detected |
| lib/etc/objects/DefinitionRole.js | safe | No malicious patterns detected |
| lib/etc/objects/DescriptionListDetailRole.js | safe | No malicious patterns detected |
| lib/etc/objects/DescriptionListRole.js | safe | No malicious patterns detected |
| lib/etc/objects/DescriptionListTermRole.js | safe | The file is a benign static role definition with no executable, network, filesystem, or dynamic behavior. |
| lib/etc/objects/DetailsRole.js | safe | No malicious patterns detected |
| lib/etc/objects/DialogRole.js | safe | No malicious patterns detected; the file is a simple static export defining an accessibility role concept with no executable, network, or filesystem behavior. |
| lib/etc/objects/DirectoryRole.js | safe | No malicious patterns detected; the file only defines a static ARIA/HTML role metadata object with no executable, network, or filesystem activity. |
| lib/etc/objects/DisclosureTriangleRole.js | safe | No malicious patterns detected |
| lib/etc/objects/DivRole.js | safe | No malicious patterns detected |
| lib/etc/objects/DocumentRole.js | safe | No malicious patterns detected; the file is a simple static data module defining a DocumentRole object with no executable, network, file system, or dynamic code behavior. |
| lib/etc/objects/EmbeddedObjectRole.js | safe | This file contains only static metadata defining an accessibility role object, with no executable, network, filesystem, or obfuscated behavior. |
| lib/etc/objects/FeedRole.js | safe | This is a static accessibility role definition file with no executable logic, network calls, or suspicious patterns. |
| lib/etc/objects/FigcaptionRole.js | safe | No malicious patterns detected |
| lib/etc/objects/FigureRole.js | safe | No malicious patterns detected |
| lib/etc/objects/FooterRole.js | safe | No malicious patterns detected |
| lib/etc/objects/FormRole.js | safe | No malicious patterns detected |
| lib/etc/objects/GridRole.js | safe | No malicious patterns detected |
| lib/etc/objects/GroupRole.js | safe | No malicious patterns detected |
| lib/etc/objects/HeadingRole.js | safe | No malicious patterns detected |
| lib/etc/objects/IframePresentationalRole.js | safe | No malicious patterns detected |
| lib/etc/objects/IframeRole.js | safe | No malicious patterns detected |
| lib/etc/objects/IgnoredRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ImageMapLinkRole.js | safe | The file is a simple static role definition with no executable, network, filesystem, or obfuscated behavior. |
| lib/etc/objects/ImageMapRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ImageRole.js | safe | No malicious patterns detected |
| lib/etc/objects/InlineTextBoxRole.js | safe | No malicious patterns detected |
| lib/etc/objects/InputTimeRole.js | safe | No malicious patterns detected |
| lib/etc/objects/LabelRole.js | safe | This file only exports a static ARIA LabelRole object definition and contains no executable, network, file system, or obfuscated code. |
| lib/etc/objects/LegendRole.js | safe | No malicious patterns detected |
| lib/etc/objects/LineBreakRole.js | safe | No malicious patterns detected |
| lib/etc/objects/LinkRole.js | safe | This file is a benign static data definition for an accessibility role mapping and contains no executable or malicious patterns. |
| lib/etc/objects/ListBoxOptionRole.js | safe | No malicious patterns detected; the file only defines a static ARIA role metadata object with no executable, network, filesystem, or process-related behavior. |
| lib/etc/objects/ListBoxRole.js | safe | No malicious patterns detected; the file only defines a static ARIA role mapping object with no executable or network behavior. |
| lib/etc/objects/ListItemRole.js | safe | No malicious patterns detected; the file only exports a static ARIA role definition with no executable or network code. |
| lib/etc/objects/ListMarkerRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ListRole.js | safe | No malicious patterns detected |
| lib/etc/objects/LogRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MainRole.js | safe | This file is a static accessibility role definition with no executable logic, network calls, or malicious patterns. |
| lib/etc/objects/MarkRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MarqueeRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MathRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MenuBarRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MenuButtonRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MenuItemCheckBoxRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MenuItemRadioRole.js | safe | No malicious patterns detected; the file is a simple static role definition object with no executable, network, or filesystem behavior. |
| lib/etc/objects/MenuItemRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MenuListOptionRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MenuListPopupRole.js | safe | No malicious patterns detected |
| lib/etc/objects/MenuRole.js | safe | No malicious patterns detected; the file is a simple static role definition object exported as a default module. |
| lib/etc/objects/MeterRole.js | safe | No malicious patterns detected; the file is a simple static ARIA role definition with no executable or suspicious code. |
| lib/etc/objects/NavigationRole.js | safe | This file contains a simple static data definition for an accessibility role with no executable logic, network calls, or suspicious patterns. |
| lib/etc/objects/NoneRole.js | safe | No malicious patterns detected |
| lib/etc/objects/NoteRole.js | safe | No malicious patterns detected; the file only exports a static ARIA role definition object with no dynamic execution, network, filesystem, or process activity. |
| lib/etc/objects/OutlineRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ParagraphRole.js | safe | No malicious patterns detected |
| lib/etc/objects/PopUpButtonRole.js | safe | No malicious patterns detected |
| lib/etc/objects/PreRole.js | safe | No malicious patterns detected |
| lib/etc/objects/PresentationalRole.js | safe | No malicious patterns detected; the file is a simple static module exporting a PresentationalRole object with no dynamic behavior or external interactions. |
| lib/etc/objects/ProgressIndicatorRole.js | safe | This file is a static ARIA role definition with no executable, network, or filesystem behavior, and contains no malicious patterns. |
| lib/etc/objects/RadioButtonRole.js | safe | No malicious patterns detected |
| lib/etc/objects/RadioGroupRole.js | safe | No malicious patterns detected |
| lib/etc/objects/RegionRole.js | safe | No malicious patterns detected; the file only defines a static ARIA region role object with no executable or suspicious behavior. |
| lib/etc/objects/RootWebAreaRole.js | safe | No malicious patterns detected |
| lib/etc/objects/RowHeaderRole.js | safe | No malicious patterns detected |
| lib/etc/objects/RowRole.js | safe | No malicious patterns detected |
| lib/etc/objects/RubyRole.js | safe | No malicious patterns detected |
| lib/etc/objects/RulerRole.js | safe | No malicious patterns detected |
| lib/etc/objects/SVGRootRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ScrollAreaRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ScrollBarRole.js | safe | No malicious patterns detected |
| lib/etc/objects/SeamlessWebAreaRole.js | safe | No malicious patterns detected |
| lib/etc/objects/SearchBoxRole.js | safe | No malicious patterns detected; the file only defines a static accessibility role mapping for a search box. |
| lib/etc/objects/SearchRole.js | safe | No malicious patterns detected |
| lib/etc/objects/SliderRole.js | safe | No malicious patterns detected |
| lib/etc/objects/SliderThumbRole.js | safe | No malicious patterns detected |
| lib/etc/objects/SpinButtonPartRole.js | safe | No malicious patterns detected |
| lib/etc/objects/SpinButtonRole.js | safe | No malicious patterns detected; the file is a static ARIA role definition with no executable, network, or filesystem logic. |
| lib/etc/objects/SplitterRole.js | safe | No malicious patterns detected |
| lib/etc/objects/StaticTextRole.js | safe | No malicious patterns detected |
| lib/etc/objects/StatusRole.js | safe | No malicious patterns detected |
| lib/etc/objects/SwitchRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TabGroupRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TabListRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TabPanelRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TabRole.js | safe | No malicious patterns detected; the file is a simple static data definition for an accessibility role. |
| lib/etc/objects/TableHeaderContainerRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TableRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TermRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TextAreaRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TextFieldRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TimeRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TimerRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ToggleButtonRole.js | safe | No malicious patterns detected |
| lib/etc/objects/ToolbarRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TreeGridRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TreeItemRole.js | safe | No malicious patterns detected |
| lib/etc/objects/TreeRole.js | safe | No malicious patterns detected |
| lib/etc/objects/UserInterfaceTooltipRole.js | safe | No malicious patterns detected |
| lib/etc/objects/VideoRole.js | safe | No malicious patterns detected |
| lib/etc/objects/WebAreaRole.js | safe | No malicious patterns detected |
| lib/etc/objects/WindowRole.js | safe | No malicious patterns detected |
| lib/index.js | safe | No malicious patterns detected |
| lib/util/iterationDecorator.js | safe | The code implements a simple iterator decorator utility using Symbol.iterator and a locally imported proxy module, with no malicious patterns, network activity, credential access, or dynamic code execution. |
| lib/util/iteratorProxy.js | safe | The file implements a simple iterator proxy utility with no network, filesystem, process, or dynamic code execution behavior; it is safe. |
Scanned versions of axobject-query
| Version | Verdict | Files | Scanned |
|---|---|---|---|
| 4.1.0 | No issues | 131 | Oct 6, 2026 |
Frequently asked questions
Is axobject-query safe to use?
Our AI source review of axobject-query@4.1.0 found no malicious code: no install-time payloads, credential theft, exfiltration, obfuscated loaders or backdoors.
Does axobject-query contain malware?
No malware was identified in axobject-query@4.1.0 when Togoder Security scanned it on Oct 6, 2026. A new version can still introduce malicious code, so scan the exact versions in your lockfile.
How was axobject-query checked?
Togoder Security downloaded the published npm package and had an AI model read its 131 source files, looking for install scripts, credential access, network exfiltration, obfuscation, backdoors and crypto-wallet theft. The results are cached by file hash and shown here.
How do I scan axobject-query together with the rest of my dependencies?
Upload your lockfile at https://security.togoder.click/scan or call the API documented at https://security.togoder.click/api-docs. Files that have already been scanned, like the ones in axobject-query@4.1.0, cost nothing.