npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of netlify, generated . This is a read-only snapshot.
Run your own audit →

Audit of netlify

Re-run this audit
Tracking daily next

Progress over time

Strong trust
8.1% (20) staged or trusted
Any trust
21.0% (52) incl. provenance
No trust signal
79.0% (196) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/249/49/8
  1. 52/248 any trust
  2. ...
    52/248 any trust
  3. 52/248 any trust
  4. ... [viewing]
    52/248 any trust
    1. [viewing]
  5. ...
    52/248 any trust
  6. ...
    52/248 any trust
  7. 52/248 any trust
  8. 52/248 any trust
  9. 52/248 any trust
  10. 52/248 any trust
  11. ...
    52/248 any trust
  12. 52/248 any trust
  13. 52/248 any trust
  14. 52/248 any trust
  15. 52/248 any trust
  16. 52/248 any trust
  17. ...
    52/248 any trust
In scope
248
Staged publish
0
Trusted publisher
20
Provenance only
32
No trust signal
196
Deprecated latest
6
248 packages · click a column to sort
Package trust level report
netlify27.4.3provenancenetlify-bot354,807
netlify-cli27.4.3provenancenetlify-bot365,789
@netlify/build36.4.6trusted publisherGitHub Actions383,933
@netlify/agent-runner-cli1.168.0nonenetlify-bot4,629
@netlify/functions-utils7.1.8trusted publisherGitHub Actions365,177
@netlify/zip-it-and-ship-it15.5.0trusted publisherGitHub Actions744,152
@netlify/blobs11.0.3provenancenetlify-bot1,400,369
@netlify/dev5.0.5provenancenetlify-bot376,004
@netlify/database2.0.1provenancenetlify-bot35,016
@netlify/runtime5.0.3provenancenetlify-bot374,975
@netlify/functions-dev2.0.5provenancenetlify-bot331,277
@netlify/open-api2.57.1nonenetlify-bot631,128
@netlify/vite-plugin-tanstack-start1.3.19trusted publisherGitHub Actions45,604
@netlify/vite-plugin3.0.1trusted publisherGitHub Actions156,440
@netlify/nuxt1.0.1trusted publisherGitHub Actions2,265
@netlify/spark-ui1.31.0noneGitHub Actions902
@netlify/ai1.0.1provenancenetlify-bot347,101
@netlify/redirects4.0.2provenancenetlify-bot368,401
@netlify/otel7.0.2provenancenetlify-bot653,088
@netlify/database-dev1.0.1provenancenetlify-bot268,775
@netlify/database-proxy0.2.1provenancenetlify-bot1,266
@netlify/git-utils7.1.1trusted publisherGitHub Actions362,305
@netlify/cache-utils7.1.2trusted publisherGitHub Actions399,368
@netlify/serverless-functions-api2.20.0nonenetlify-bot997,369
@netlify/axis1.17.5nonenetlify-bot887
@netlify/edge-bundler16.0.4trusted publisherGitHub Actions598,714
@netlify/config25.2.3trusted publisherGitHub Actions605,738
@netlify/redirect-parser16.1.1trusted publisherGitHub Actions550,802
@netlify/api15.1.2trusted publisherGitHub Actions443,041
@netlify/images2.0.1provenancenetlify-bot382,048
@netlify/headers3.0.1provenancenetlify-bot367,772
@netlify/edge-functions-dev2.0.1provenancenetlify-bot324,413
@netlify/dev-utils6.0.1provenancenetlify-bot1,249,467
@netlify/functions6.0.0provenancenetlify-bot991,598
@netlify/static4.0.0provenancenetlify-bot367,487
@netlify/identity2.0.0provenancenetlify-bot15,193
@netlify/edge-functions4.0.0provenancenetlify-bot554,327
@netlify/cache4.0.0provenancenetlify-bot375,756
@netlify/runtime-utils3.0.0provenancenetlify-bot943,133
@netlify/aws-lambda-compat2.0.0provenancenetlify-bot3,980
@netlify/types3.0.0provenancenetlify-bot821,460
@netlify/headers-parser10.1.1trusted publisherGitHub Actions500,190
@netlify/build-info11.3.0trusted publisherGitHub Actions359,823
@netlify/plugins-list6.81.9nonenetlify-bot356,367
@netlify/plugin-nextjs5.15.13trusted publisherGitHub Actions275,592
@netlify/opentelemetry-sdk-setup3.1.0trusted publisherGitHub Actions132
@netlify/run-utils7.1.0trusted publisherGitHub Actions348,590
@netlify/nock-udp6.1.0trusted publisherGitHub Actions40
@netlify/opentelemetry-utils3.1.0trusted publisherGitHub Actions323,285
@netlify/edge-functions-bootstrap3.2.0nonenetlify-bot563,887
@netlify/vite-plugin-react-router4.0.0trusted publisherGitHub Actions27,299
@netlify/angular-runtime4.0.0provenancenetlify-bot3,130
@netlify/ts-cli1.2.0provenancenetlify-bot1,086
@netlify/db-proxy0.1.1provenancenetlify-bot5
@netlify/sdk5.0.4nonenetlify-bot113,213
@netlify/sdk--ui-react2.1.1nonenetlify-bot97,593
@netlify/sdk--ui-functions2.0.4nonenetlify-bot97,322
@netlify/sdk--extension-api-client3.0.4nonenetlify-bot99,742
@netlify/create-sdk3.0.4nonenetlify-bot228
@netlify/db0.4.0provenancenetlify-bot3,394
@netlify/db-dev0.7.0provenancenetlify-bot33,397
@netlify/plugin-csp-nonce1.6.2nonenetlify-bot8,966
netlify-identity-widget2.0.3nonenetlify-bot10,391
gotrue-js1.0.1nonenetlify-bot45,992
@netlify/remix-edge-adapter4.0.0provenancenetlify-bot1,349
@netlify/remix-runtime3.0.0provenancenetlify-bot1,335
@netlify/remix-adapter3.0.0provenancenetlify-bot2,004
@netlify/plugin-visual-editor1.4.3nonenetlify-bot71
@netlify/neon0.1.2nonenetlify-bot6,601
@netlify/sdk--ui-core2.0.1nonenetlify-bot93,798
@netlify/sdk--documentation-site0.0.1nonenetlify-bot10
@netlify/plugin-cve-2025-551821.0.0noneeduardoboucas5
@netlify/netlify-plugin-cve-2025-551821.0.0noneeduardoboucas6
@netlify/plugin-lighthouse6.0.4nonenetlify-bot31,921
@netlify/mcp1.15.1noneseanroberts17,669
@netlify/async-workloads0.0.106noneseanroberts5,273
@netlify/plugin-agent-runner1.18.0nonenetlify-bot92
@netlify/e2e1.2.1nonenetlify-bot25
@netlify/netlify-design-tokens7.1.0nonenetlify-bot83,859
@netlify/content-engine1.9.1nonenetlify-bot45,670
@netlify/framework-info10.0.5nonenetlify-bot115,793
@netlify/plugin-gatsby3.8.4nonenetlify-bot6,588
@netlify/plugin-dev-server1.7.2nonenetlify-bot68
@netlify/extensions-mcp1.0.4nonesmnh7
@netlify/netlify-plugin-netlify-extension1.2.2nonenetlify-bot11,206
@netlify/ui0.0.23nonenetlify-bot73,648
@netlify/tailwind-config2.1.0nonenetlify-bot71,158
@netlify/local-functions-proxy2.0.3nonenetlify-bot326,816
netlify-redirect-parser14.4.0nonenetlify-bot46,300
@netlify/cnm-plugin0.7.2nonenetlify-bot65
@netlify/connect-client0.6.2nonenetlify-bot25
@netlify/launchdarkly-server-sdk0.1.5nonenetlify-bot6
@netlify/content-engine-graphiql-explorer1.1.0nonenetlify-bot25,521
@netlify/plugin-storybook1.4.3nonenetlify-bot24
@netlify/integrations0.5.4nonenetlify-bot19,568
@netlify/connect0.0.2nonenetlify-bot5
@netlify/sentry0.0.10nonenetlify-bot318
netlify-headers-parser7.1.4nonenetlify-bot40,460
@netlify/plugin-emails1.1.1nonenetlify-bot3,733
@netlify/next-runtime5.0.0-alpha.25nonenetlify-bot265
remlink1.2.0nonenetlify-bot60
@netlify/ipx1.4.6nonenetlify-bot13,488
@netlify/planetscale1.1.0nonenetlify-bot24
@netlify/vite-plugin-netlify-edge1.1.3nonenetlify-bot52
gatsby-plugin-netlify5.1.1nonenetlify-bot21,478
netlify-redirector0.5.0noneeduardoboucas410,408
@netlify/esbuild-wasm0.14.39-1noneskn0tt20
@netlify/esbuild0.14.39-1noneskn0tt24,898
@netlify/esbuild-linux-s390x0.14.39-1noneskn0tt4,648
@netlify/esbuild-linux-arm640.14.39-1noneskn0tt4,835
@netlify/esbuild-linux-mips64le0.14.39-1noneskn0tt4,680
@netlify/esbuild-linux-ppc64le0.14.39-1noneskn0tt4,675
@netlify/esbuild-linux-riscv640.14.39-1noneskn0tt4,659
@netlify/esbuild-linux-640.14.39-1noneskn0tt21,584
@netlify/esbuild-linux-320.14.39-1noneskn0tt4,669
@netlify/esbuild-linux-arm0.14.39-1noneskn0tt4,668
@netlify/esbuild-android-640.14.39-1noneskn0tt4,552
@netlify/esbuild-sunos-640.14.39-1noneskn0tt4,655
@netlify/esbuild-darwin-640.14.39-1noneskn0tt4,718
@netlify/esbuild-android-arm640.14.39-1noneskn0tt4,681
@netlify/esbuild-darwin-arm640.14.39-1noneskn0tt4,966
@netlify/esbuild-openbsd-640.14.39-1noneskn0tt4,667
@netlify/esbuild-netbsd-640.14.39-1noneskn0tt4,652
@netlify/esbuild-freebsd-640.14.39-1noneskn0tt4,669
@netlify/esbuild-freebsd-arm640.14.39-1noneskn0tt4,678
@netlify/esbuild-windows-320.14.39-1noneskn0tt4,663
@netlify/esbuild-windows-arm640.14.39-1noneskn0tt4,648
@netlify/esbuild-windows-640.14.39-1noneskn0tt4,869
gh-release-fetch4.0.3nonenetlify-bot140,994
@netlify/next1.4.9nonenetlify-bot2,746
@netlify/auth00.1.3noneed_stephinson12
@netlify/node-cookies0.1.0noneeduardoboucas278,059
@netlify/urlpattern-polyfill6.0.6noneeduardoboucas11
@netlify/emails1.1.0nonenetlify-bot425
@netlify/plugin-contentful-buildtime0.0.3noneed_stephinson57
@netlify/marketing-community-nav1.1.0noneakardet14
@netlify/netlify-marketing-tokens1.1.0nonenetlify-bot89
netlify-lambda2.0.16nonenetlify-bot5,416DEPRECATED
@netlify/plugin-changelog-redirects1.0.1nonenetlify-bot7
@netlify/hydrogen-platform1.1.4nonenetlify-bot32
@netlify/netlify-plugin-functions-bundling-config2.1.0nonenetlify-bot20
@netlify/feature-package-pilot0.1.11nonenetlify-bot17
@netlify/gatsby-runner1.1.14noneascorbic81
@netlify/eslint-config-node7.0.1nonenetlify-bot12,702
@netlify/marketing-web-fonts1.0.1nonezachleat8
@netlify/functions-runtime-api1.1.1noneeduardoboucas13
create-netlify0.0.1noneascorbic11
@netlify/binary-info1.0.0nonenetlify-bot534,162
react-netlify-identity0.2.7noneskn0tt2,746
@netlify/plugin-a11y1.0.0-beta.1nonedengeist106
@netlify/plugin-edge-handlers3.0.8nonenetlify-bot7,517
netlify-cms2.10.192noneerezro2,717
netlify-cms-app2.15.72noneerezro3,801
netlify-cms-core2.55.2noneerezro4,717
netlify-cms-widget-markdown2.15.1noneerezro3,444
netlify-cms-backend-github2.14.1noneerezro3,424
netlify-cms-widget-file2.12.1noneerezro3,049
netlify-cms-lib-util2.15.1noneerezro3,372
netlify-cms-widget-relation2.11.1noneerezro3,059
netlify-cms-widget-object2.7.2noneerezro2,982
netlify-cms-lib-widgets1.8.1noneerezro2,065
netlify-cms-proxy-server1.3.24noneerezro1,692
netlify-cms-locales1.39.0noneerezro2,907
@netlify/plugin-secrets-manager1.1.1nonenetlify-bot18
netlify-cms-widget-code1.3.4noneerezro2,650
netlify-cms-ui-default2.15.5noneerezro3,283
netlify-cms-backend-git-gateway2.13.1noneerezro3,264
netlify-plugin-debug-cache1.0.4noneehmicky2,234
netlify-cms-backend-gitlab2.13.0noneerezro3,222
netlify-cms-widget-map1.5.1noneerezro2,793
netlify-cms-backend-bitbucket2.14.0noneerezro3,227
@netlify/plugin-nextjs-experimental0.0.6noneascorbic16DEPRECATED
@netlify/routing-local-proxy0.34.1nonenetlify-bot4,643
@netlify/routing-local-proxy-win32-x640.34.1nonenetlify-bot2,139
@netlify/routing-local-proxy-linux-x640.34.1nonenetlify-bot4,517
@netlify/routing-local-proxy-darwin-x640.34.1nonenetlify-bot2,132
@netlify/routing-local-proxy-darwin-arm640.34.1nonenetlify-bot2,145
@netlify/edge-handler-types0.34.1nonenetlify-bot648
netlify-cms-widget-datetime2.7.4noneerezro3,147
netlify-cms-widget-date2.6.3noneerezro3,072
@netlify/plugin-angular-universal1.0.1nonelindsaylevine33
@netlify/local-functions-proxy-win32-x641.1.1nonenetlify-bot47,585
@netlify/local-functions-proxy-win32-ia321.1.1nonenetlify-bot23,343
@netlify/local-functions-proxy-openbsd-x641.1.1nonenetlify-bot23,163
@netlify/local-functions-proxy-linux-x641.1.1nonenetlify-bot289,774
@netlify/local-functions-proxy-linux-ppc641.1.1nonenetlify-bot23,170
@netlify/local-functions-proxy-linux-ia321.1.1nonenetlify-bot23,339
@netlify/local-functions-proxy-linux-arm641.1.1nonenetlify-bot52,830
@netlify/local-functions-proxy-linux-arm1.1.1nonenetlify-bot23,348
@netlify/local-functions-proxy-freebsd-x641.1.1nonenetlify-bot23,188
@netlify/local-functions-proxy-freebsd-arm641.1.1nonenetlify-bot23,183
@netlify/local-functions-proxy-darwin-x641.1.1nonenetlify-bot43,730
@netlify/local-functions-proxy-darwin-arm641.1.1nonenetlify-bot54,812
netlify-cms-widget-list2.10.1noneerezro3,146
@netlify/classnames-template-literals1.0.3nonecharliegerard4,523
@netlify/parse-npm-script0.1.2noneascorbic694
@netlify/local-functions-proxy-windows-x640.1.0noneeduardoboucas5
@netlify/local-functions-proxy-windows-ia320.1.0noneeduardoboucas9
@netlify/local-functions-proxy-linux-ppc64le0.1.0noneeduardoboucas6
@netlify/local-functions-proxy-linux-320.1.0noneeduardoboucas6
@netlify/local-functions-proxy-linux-640.1.0noneeduardoboucas6
@netlify/local-functions-proxy-openbsd-640.1.0noneeduardoboucas5
@netlify/local-functions-proxy-freebsd-640.1.0noneeduardoboucas6
@netlify/local-functions-proxy-windows-320.1.0noneeduardoboucas5
@netlify/local-functions-proxy-windows-640.1.0noneeduardoboucas6
@netlify/local-functions-proxy-darwin-640.1.0noneeduardoboucas6
@netlify/netlify-cms-widget-parent1.0.12noneerezro30
netlify-cms-backend-test2.11.3noneerezro3,052
netlify-cms-widget-image2.8.1noneerezro3,023
netlify-cms-lib-auth2.4.2noneerezro2,993
netlify-cms-backend-proxy1.2.3noneerezro1,958
netlify-cms-widget-select2.8.2noneerezro3,049
netlify-cms-widget-text2.4.1noneerezro2,906
netlify-cms-widget-boolean2.4.1noneerezro2,894
netlify-cms-widget-number2.5.0noneerezro2,911
netlify-cms-widget-string2.3.0noneerezro2,880
netlify-cms-default-exports2.4.0noneerezro43
netlify-cms-editor-component-image2.7.0noneerezro3,009
@netlify/tailwindcss-first-line1.0.1nonecharliegerard9
@netlify/plugin-sitemap0.8.1noneerezro6,846
@netlify/netlitest-helper0.2.5nonefuturegerald13
netlify-cms-media-library-cloudinary1.3.10noneerezro756
netlify-cms-media-library-uploadcare0.5.10noneerezro886
@netlify/traffic-mesh-agent0.27.10nonecalavera2,227
@netlify/traffic-mesh-agent-win32-x640.27.10nonecalavera825
@netlify/traffic-mesh-agent-linux-x640.27.10nonecalavera2,177
@netlify/traffic-mesh-agent-darwin-x640.27.10nonecalavera820
@netlify/netlify-colors1.1.0nonelesliecdubs8DEPRECATED
netlify-plugin-deploy-preview-commenting0.0.1-alpha.16noneehmicky1,696DEPRECATED
@netlify/plugin-next0.0.4nonedavidwells10DEPRECATED
netlify-plugin-search-index0.1.6nonesw-yx22
netlify-plugin-a11y0.0.12noneehmicky284
netlify-plugin-rss0.0.8nonesw-yx17
netlify-plugin-no-more-4040.0.15nonesw-yx186
netlify-plugin-encrypted-files0.0.5nonesw-yx10
react-netlify-identity-widget0.2.7nonesw-yx465
@netlify/sitemap-plugin0.0.4nonedavidwells8
gocommerce-js5.0.0nonemarcus.netlify55
@netlify/cli-utils1.1.0nonesw-yx330
netlify-dev-plugin1.0.28noneraeesbhatti307DEPRECATED
@netlify/rules-proxy0.1.4nonesw-yx137
netlify-cli-logo1.0.0nonesw-yx475
vue-cli-plugin-netlify-lambda0.1.1noneshortdiv24
netlify-lm-plugin1.0.0nonecalavera7
micro-api-client3.3.0nonebret336,661
netlifys_api_definition0.2.0nonebret7
@netlify/parse-domain2.0.0noneimorente10
netlify-setup-heuristics1.2.5nonecalavera35