npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of gameroman, generated . This is a read-only snapshot.
Run your own audit →

Audit of gameroman

Re-run this audit
Tracking daily next

Progress over time

Strong trust
11.3% (15) staged or trusted
Any trust
11.3% (15) incl. provenance
No trust signal
88.7% (118) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/248/289/19/8
  1. 15/133 any trust
  2. ...
    15/131 any trust
  3. 15/131 any trust
  4. 15/131 any trust
  5. 15/131 any trust
  6. 15/131 any trust
  7. ...
    15/131 any trust
  8. ...
    15/131 any trust
  9. 15/131 any trust
  10. 15/131 any trust
  11. ...
    15/131 any trust
  12. 15/128 any trust
  13. ...
    15/127 any trust
  14. 15/129 any trust
  15. [viewing]
    14/117 any trust
In scope
117
Staged publish
14
Trusted publisher
0
Provenance only
0
No trust signal
103
Deprecated latest
5
117 packages · click a column to sort
Package trust level report
modern-traverse0.0.0nonegameroman0
@lichess/api0.1.6staged publishGitHub Actions26
find-proc0.1.0staged publishGitHub Actions568
workers-deploy0.0.0nonegameroman155
workers-cli0.0.0nonegameroman149
cloudflare-deploy0.0.0nonegameroman134
proc-find0.0.0nonegameroman125
minizod0.1.0staged publishGitHub Actions264
pawfs0.0.1staged publishGitHub Actions306
savefile.js0.2.0staged publishGitHub Actions257
genson.ts0.0.2staged publishGitHub Actions166
@archiver/archiver0.2.0nonegameroman2,501
oxlint-plugin-anti-slop0.0.0nonegameroman46
@archiver/zip-stream0.1.1nonegameroman2,280
@archiver/tar-stream0.1.1nonegameroman2,261
@archiver/readdir-glob0.1.1nonegameroman2,236
@excel.js/exceljs0.13.0nonegameroman5,305
@excel.js/jszip0.2.0nonegameroman5,206
es-pako0.1.0staged publishGitHub Actions1,072
ged.ts0.0.0nonegameroman6
@eslintplugin/eslint-plugin-react0.1.0nonegameroman9
@eslintplugin/eslint-plugin-jsx-a11y0.1.0nonegameroman22
@eslintplugin/jsx-ast-utils0.1.0nonegameroman7
@eslintplugin/resolve0.1.0nonegameroman14
@gameroman/config0.2.9staged publishGitHub Actions2,302
@excel.js/unzipper0.2.0nonegameroman5,193
nano-bplist-creator0.1.0nonegameroman17
nano-stream-buffers0.1.0nonegameroman27
neoyaml0.1.1staged publishGitHub Actions85
kit-p0.0.2staged publishGitHub Actions12
limit-p0.0.0nonegameroman2
nanopass0.0.0nonegameroman9
nacl.ts0.0.0nonegameroman5
herdr-ts-sdk0.0.0nonegameroman10
css-stop0.0.0nonegameroman5
color-stop0.0.0nonegameroman10
css-color-stop0.0.0nonegameroman7
nanoyaml0.0.0nonegameroman7
es-sax0.1.2staged publishGitHub Actions81
picocalc0.0.4staged publishGitHub Actions68
train-times0.0.4staged publishGitHub Actions27
fft.ts0.1.2staged publishGitHub Actions67
neotoml0.0.1nonegameroman84
@neotoml/stringifier0.0.1nonegameroman75
@neotoml/parser0.0.1nonegameroman78
nanotoml0.0.0nonegameroman5
tiny-toml0.0.0nonegameroman8
is-system0.3.1nonegameroman10
sys-is0.0.0nonegameroman0
bigint.bitlength0.2.0nonegameroman65
esm-ver0.0.0nonegameroman7
es-ver0.0.0nonegameroman1
@rolldown-plugin/solid0.1.0nonegameroman179
number.clamp0.0.0nonegameroman0
bigint.clamp0.0.0nonegameroman6
bigint.sqrt0.0.0nonegameroman6
number.prototype.clamp0.0.0nonegameroman0
telefon0.0.0nonegameroman6
infinibrowser0.9.1nonegameroman93
alt-lineages0.0.0nonegameroman5
infinite-craft0.1.0nonegameroman8
@savefile/fixtures0.0.1nonegameroman42
lineage-generator0.0.0nonegameroman7
es-concat-stream0.1.0nonegameroman316
roman0.5.0nonegameroman8
nanoxml0.1.0nonegameroman10
picoclone0.2.0nonegameroman6
es-xml2js0.0.0nonegameroman0
nanonum0.0.0nonegameroman7
nanocalc0.0.0nonegameroman1
@gameroman/empty0.0.0nonegameroman4
whatbeatsrock0.0.5nonegameroman6
mini-lazystream0.1.0nonegameroman9
usts0.1.1nonegameroman123
@infinite-craft/dom-types0.0.4nonegameroman128
@stockfish/bun0.0.2nonegameroman3
oxlint-next-config0.0.0nonegameroman5
oxlint-config-nextjs0.0.0nonegameroman4
@excel.js/archiver0.0.5nonegameroman5,182
@pretty-error/pretty-error0.2.0nonegameroman8
nanoflight0.2.0nonegameroman9
prettier-next0.0.0nonegameroman1
websim0.1.0nonegameroman150
@websimai/socket-types0.1.0nonegameroman7
@websimai/client-api-types0.1.0nonegameroman18
@websimai/shared-types0.1.0nonegameroman16
@archiver/compress-commons0.0.7nonegameroman41DEPRECATED
@no-polyfill/string.prototype.matchall0.0.1nonegameroman9
@no-polyfill/array-includes0.0.1nonegameroman9
no-polyfill0.0.0nonegameroman10
nano-stringify-object0.0.0nonegameroman6
@nanotemp/quick-temp0.0.1nonegameroman6
isoneof1.0.2nonegameroman7DEPRECATED
nanotemp0.0.1nonegameroman14
fast-de0.0.0nonegameroman7
smol-de0.0.0nonegameroman6
nano-deep-equal0.0.0nonegameroman10
shoojs0.0.0nonegameroman4
ultramatch0.0.0nonegameroman6
ultraglob0.0.0nonegameroman5
lsdk0.0.0nonegameroman1
deob0.0.0nonegameroman4
@websimai/core-api-types0.0.5nonegameroman6DEPRECATED
biomejs0.0.0nonegameroman1,081
stockfish-bun0.0.0nonegameroman3
nldjson0.0.0nonegameroman3
best-auth0.0.0nonegameroman3
elysiajs0.0.0nonegameroman31
lijs0.0.0nonegameroman7
@gameroman/cors0.1.0nonegameroman2DEPRECATED
@gameroman/trycatch0.1.0nonegameroman5DEPRECATED
rmandotdev0.0.0nonegameroman9
ts-pandoc0.0.1nonegameroman4
gameroman0.0.1nonegameroman4
internet-roadtrip0.0.1nonegameroman3
infinite-craft-helper0.0.1nonegameroman6
infinite-craft-framework0.0.1nonegameroman5