# axobject-query@4.1.0 security report (npm)

- Verdict: **No issues** (risk level: safe)
- Scanned: 2026-10-06T14:13:57.000Z
- Files reviewed: 131
- Findings: no findings
- Report: https://security.togoder.click/npm/axobject-query
- Source: Togoder Security (https://security.togoder.click), AI source-code review

## Summary

Togoder Security scanned the npm package axobject-query@4.1.0 on Oct 6, 2026. An AI review of 131 source files produced no findings. No malicious behavior, install-time payloads, credential theft or exfiltration were identified.

## Findings

No findings.

## Files reviewed

- `lib/AXObjectElementMap.js` (safe): No malicious patterns detected; code is a standard Babel-transpiled utility for mapping accessibility objects.
- `lib/AXObjectRoleMap.js` (safe): No malicious patterns detected
- `lib/AXObjectsMap.js` (safe): No malicious patterns detected; the file is a benign accessibility object role registry with no network, filesystem, process, or dynamic code execution activity.
- `lib/elementAXObjectMap.js` (safe): No malicious patterns detected; the code is a benign Babel-transpiled utility that builds a lookup map from static AXObject definition data without any network, filesystem, process, or dynamic execution activity.
- `lib/etc/objects/AbbrRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/AlertDialogRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/AlertRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/AnnotationRole.js` (safe): No malicious patterns detected in the analyzed file.
- `lib/etc/objects/ApplicationRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ArticleRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/AudioRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/BannerRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/BlockquoteRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/BusyIndicatorRole.js` (safe): No malicious patterns detected; the file only defines a static accessibility role descriptor with no network, filesystem, process, or dynamic code activity.
- `lib/etc/objects/ButtonRole.js` (safe): The file contains only static configuration data defining ARIA/HTML button role concepts; no malicious patterns or executable code detected.
- `lib/etc/objects/CanvasRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/CaptionRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/CellRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/CheckBoxRole.js` (safe): No malicious patterns detected; the file is a simple static role definition for a checkbox accessibility widget.
- `lib/etc/objects/ColorWellRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ColumnHeaderRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ColumnRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ComboBoxRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ComplementaryRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ContentInfoRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DateRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DateTimeRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DefinitionRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DescriptionListDetailRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DescriptionListRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DescriptionListTermRole.js` (safe): The file is a benign static role definition with no executable, network, filesystem, or dynamic behavior.
- `lib/etc/objects/DetailsRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DialogRole.js` (safe): No malicious patterns detected; the file is a simple static export defining an accessibility role concept with no executable, network, or filesystem behavior.
- `lib/etc/objects/DirectoryRole.js` (safe): No malicious patterns detected; the file only defines a static ARIA/HTML role metadata object with no executable, network, or filesystem activity.
- `lib/etc/objects/DisclosureTriangleRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DivRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/DocumentRole.js` (safe): No malicious patterns detected; the file is a simple static data module defining a DocumentRole object with no executable, network, file system, or dynamic code behavior.
- `lib/etc/objects/EmbeddedObjectRole.js` (safe): This file contains only static metadata defining an accessibility role object, with no executable, network, filesystem, or obfuscated behavior.
- `lib/etc/objects/FeedRole.js` (safe): This is a static accessibility role definition file with no executable logic, network calls, or suspicious patterns.
- `lib/etc/objects/FigcaptionRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/FigureRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/FooterRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/FormRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/GridRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/GroupRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/HeadingRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/IframePresentationalRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/IframeRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/IgnoredRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ImageMapLinkRole.js` (safe): The file is a simple static role definition with no executable, network, filesystem, or obfuscated behavior.
- `lib/etc/objects/ImageMapRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ImageRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/InlineTextBoxRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/InputTimeRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/LabelRole.js` (safe): This file only exports a static ARIA LabelRole object definition and contains no executable, network, file system, or obfuscated code.
- `lib/etc/objects/LegendRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/LineBreakRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/LinkRole.js` (safe): This file is a benign static data definition for an accessibility role mapping and contains no executable or malicious patterns.
- `lib/etc/objects/ListBoxOptionRole.js` (safe): No malicious patterns detected; the file only defines a static ARIA role metadata object with no executable, network, filesystem, or process-related behavior.
- `lib/etc/objects/ListBoxRole.js` (safe): No malicious patterns detected; the file only defines a static ARIA role mapping object with no executable or network behavior.
- `lib/etc/objects/ListItemRole.js` (safe): No malicious patterns detected; the file only exports a static ARIA role definition with no executable or network code.
- `lib/etc/objects/ListMarkerRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ListRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/LogRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MainRole.js` (safe): This file is a static accessibility role definition with no executable logic, network calls, or malicious patterns.
- `lib/etc/objects/MarkRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MarqueeRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MathRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MenuBarRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MenuButtonRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MenuItemCheckBoxRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MenuItemRadioRole.js` (safe): No malicious patterns detected; the file is a simple static role definition object with no executable, network, or filesystem behavior.
- `lib/etc/objects/MenuItemRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MenuListOptionRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MenuListPopupRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/MenuRole.js` (safe): No malicious patterns detected; the file is a simple static role definition object exported as a default module.
- `lib/etc/objects/MeterRole.js` (safe): No malicious patterns detected; the file is a simple static ARIA role definition with no executable or suspicious code.
- `lib/etc/objects/NavigationRole.js` (safe): This file contains a simple static data definition for an accessibility role with no executable logic, network calls, or suspicious patterns.
- `lib/etc/objects/NoneRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/NoteRole.js` (safe): No malicious patterns detected; the file only exports a static ARIA role definition object with no dynamic execution, network, filesystem, or process activity.
- `lib/etc/objects/OutlineRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ParagraphRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/PopUpButtonRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/PreRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/PresentationalRole.js` (safe): No malicious patterns detected; the file is a simple static module exporting a PresentationalRole object with no dynamic behavior or external interactions.
- `lib/etc/objects/ProgressIndicatorRole.js` (safe): This file is a static ARIA role definition with no executable, network, or filesystem behavior, and contains no malicious patterns.
- `lib/etc/objects/RadioButtonRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/RadioGroupRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/RegionRole.js` (safe): No malicious patterns detected; the file only defines a static ARIA region role object with no executable or suspicious behavior.
- `lib/etc/objects/RootWebAreaRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/RowHeaderRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/RowRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/RubyRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/RulerRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/SVGRootRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ScrollAreaRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ScrollBarRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/SeamlessWebAreaRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/SearchBoxRole.js` (safe): No malicious patterns detected; the file only defines a static accessibility role mapping for a search box.
- `lib/etc/objects/SearchRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/SliderRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/SliderThumbRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/SpinButtonPartRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/SpinButtonRole.js` (safe): No malicious patterns detected; the file is a static ARIA role definition with no executable, network, or filesystem logic.
- `lib/etc/objects/SplitterRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/StaticTextRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/StatusRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/SwitchRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TabGroupRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TabListRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TabPanelRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TabRole.js` (safe): No malicious patterns detected; the file is a simple static data definition for an accessibility role.
- `lib/etc/objects/TableHeaderContainerRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TableRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TermRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TextAreaRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TextFieldRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TimeRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TimerRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ToggleButtonRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/ToolbarRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TreeGridRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TreeItemRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/TreeRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/UserInterfaceTooltipRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/VideoRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/WebAreaRole.js` (safe): No malicious patterns detected
- `lib/etc/objects/WindowRole.js` (safe): No malicious patterns detected
- `lib/index.js` (safe): No malicious patterns detected
- `lib/util/iterationDecorator.js` (safe): The code implements a simple iterator decorator utility using Symbol.iterator and a locally imported proxy module, with no malicious patterns, network activity, credential access, or dynamic code execution.
- `lib/util/iteratorProxy.js` (safe): The file implements a simple iterator proxy utility with no network, filesystem, process, or dynamic code execution behavior; it is safe.

AI analysis is guidance, not a guarantee. Methodology: https://security.togoder.click/methodology