npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of netlify, generated . This is a read-only snapshot.
Run your own audit →

Audit of netlify

Re-run this audit
Tracking daily next

Progress over time

Strong trust
8.7% (22) staged or trusted
Any trust
22.2% (56) incl. provenance
No trust signal
77.8% (196) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/249/119/2610/210/24
  1. ...
    56/252 any trust
  2. ...
    56/252 any trust
  3. 56/252 any trust
  4. ...
    56/252 any trust
  5. 56/252 any trust
  6. 56/252 any trust
  7. 56/252 any trust
  8. ... [viewing]
    56/252 any trust
    1. [viewing]
  9. 55/251 any trust
  10. 55/250 any trust
  11. 54/249 any trust
  12. ...
    54/249 any trust
  13. ...
    53/249 any trust
  14. ...
    53/249 any trust
  15. 53/249 any trust
  16. ...
    53/249 any trust
  17. 52/248 any trust
  18. ...
    52/248 any trust
  19. ...
    52/248 any trust
  20. ...
    52/248 any trust
  21. 52/248 any trust
  22. ...
    52/248 any trust
  23. ...
    52/248 any trust
  24. ...
    52/248 any trust
  25. 52/248 any trust
  26. 52/248 any trust
  27. 52/248 any trust
  28. 52/248 any trust
  29. ...
    52/248 any trust
  30. 52/248 any trust
  31. 52/248 any trust
  32. 52/248 any trust
  33. 52/248 any trust
  34. 52/248 any trust
  35. ...
    52/248 any trust
In scope
252
Staged publish
0
Trusted publisher
22
Provenance only
34
No trust signal
196
Deprecated latest
6
252 packages · click a column to sort
Package trust level report
@netlify/dev5.1.6provenancenetlify-bot412,684—
@netlify/redirects4.1.0provenancenetlify-bot393,604—
@netlify/redirect-matcher0.4.2nonenetlify-bot?—
@netlify/spark-ui1.32.0noneGitHub Actions159—
@netlify/axis1.20.0nonenetlify-bot1,161—
@netlify/skills1.6.0trusted publisherGitHub Actions82—
@netlify/database-proxy0.2.2provenancenetlify-bot850—
@netlify/agent-runner-cli1.191.1nonenetlify-bot4,068—
@netlify/functions-dev2.0.10provenancenetlify-bot410,733—
@netlify/blobs11.1.3provenancenetlify-bot1,708,604—
@netlify/edge-functions-dev2.0.3provenancenetlify-bot390,365—
@netlify/server0.1.2provenancenetlify-bot154—
@netlify/otel7.0.4provenancenetlify-bot920,303—
@netlify/server-dev0.1.3provenancenetlify-bot202,152—
@netlify/headers3.0.3provenancenetlify-bot391,548—
@netlify/runtime5.0.7provenancenetlify-bot414,896—
@netlify/images2.0.3provenancenetlify-bot405,711—
@netlify/functions6.0.2provenancenetlify-bot1,086,878—
@netlify/edge-functions4.0.2provenancenetlify-bot663,826—
@netlify/cache4.0.2provenancenetlify-bot401,860—
@netlify/dev-utils6.0.3provenancenetlify-bot1,501,866—
@netlify/aws-lambda-compat2.0.2provenancenetlify-bot11,001—
@netlify/types3.2.0provenancenetlify-bot1,262,270—
@netlify/plugins-list6.81.11nonenetlify-bot477,438—
@netlify/plugin-nextjs5.16.1trusted publisherGitHub Actions333,446—
@netlify/mcp1.17.0trusted publisherGitHub Actions51,994—
netlify27.10.2provenancenetlify-bot390,078—
netlify-cli27.10.2provenancenetlify-bot484,160—
@netlify/zip-it-and-ship-it16.2.3trusted publisherGitHub Actions1,040,664—
@netlify/build37.3.3trusted publisherGitHub Actions522,471—
@netlify/functions-utils7.1.15trusted publisherGitHub Actions506,853—
@netlify/config25.2.6trusted publisherGitHub Actions735,300—
@netlify/edge-bundler16.1.1trusted publisherGitHub Actions746,649—
@netlify/open-api2.60.0nonenetlify-bot834,655—
@netlify/plugin-emails2.0.1nonenetlify-bot4,823—
@netlify/serverless-functions-api2.23.0nonenetlify-bot1,369,639—
@netlify/opentelemetry-sdk-setup4.0.0trusted publisherGitHub Actions251—
@netlify/opentelemetry-utils4.0.0trusted publisherGitHub Actions421,255—
@netlify/database2.0.1provenancenetlify-bot57,628—
@netlify/vite-plugin-tanstack-start1.3.19trusted publisherGitHub Actions55,439—
@netlify/vite-plugin3.0.1trusted publisherGitHub Actions127,643—
@netlify/nuxt1.0.1trusted publisherGitHub Actions1,377—
@netlify/ai1.0.1provenancenetlify-bot437,295—
@netlify/database-dev1.0.1provenancenetlify-bot354,163—
@netlify/git-utils7.1.1trusted publisherGitHub Actions463,005—
@netlify/cache-utils7.1.2trusted publisherGitHub Actions499,782—
@netlify/redirect-parser16.1.1trusted publisherGitHub Actions671,621—
@netlify/api15.1.2trusted publisherGitHub Actions545,300—
@netlify/static4.0.0provenancenetlify-bot389,390—
@netlify/identity2.0.0provenancenetlify-bot32,403—
@netlify/runtime-utils3.0.0provenancenetlify-bot1,281,668—
@netlify/headers-parser10.1.1trusted publisherGitHub Actions619,403—
@netlify/build-info11.3.0trusted publisherGitHub Actions452,286—
@netlify/run-utils7.1.0trusted publisherGitHub Actions460,858—
@netlify/nock-udp6.1.0trusted publisherGitHub Actions119—
@netlify/edge-functions-bootstrap3.2.0nonenetlify-bot729,627—
@netlify/vite-plugin-react-router4.0.0trusted publisherGitHub Actions8,631—
@netlify/angular-runtime4.0.0provenancenetlify-bot3,801—
@netlify/ts-cli1.2.0provenancenetlify-bot815—
@netlify/db-proxy0.1.1provenancenetlify-bot12—
@netlify/sdk5.0.4nonenetlify-bot153,362—
@netlify/sdk--ui-react2.1.1nonenetlify-bot125,672—
@netlify/sdk--ui-functions2.0.4nonenetlify-bot125,634—
@netlify/sdk--extension-api-client3.0.4nonenetlify-bot136,205—
@netlify/create-sdk3.0.4nonenetlify-bot32—
@netlify/db0.4.0provenancenetlify-bot8,137—
@netlify/db-dev0.7.0provenancenetlify-bot16,197—
@netlify/plugin-csp-nonce1.6.2nonenetlify-bot12,307—
netlify-identity-widget2.0.3nonenetlify-bot13,729—
gotrue-js1.0.1nonenetlify-bot67,478—
@netlify/remix-edge-adapter4.0.0provenancenetlify-bot475—
@netlify/remix-runtime3.0.0provenancenetlify-bot482—
@netlify/remix-adapter3.0.0provenancenetlify-bot1,388—
@netlify/plugin-visual-editor1.4.3nonenetlify-bot93—
@netlify/neon0.1.2nonenetlify-bot5,684—
@netlify/sdk--ui-core2.0.1nonenetlify-bot112,936—
@netlify/sdk--documentation-site0.0.1nonenetlify-bot10—
@netlify/plugin-cve-2025-551821.0.0noneeduardoboucas12—
@netlify/netlify-plugin-cve-2025-551821.0.0noneeduardoboucas10—
@netlify/plugin-lighthouse6.0.4nonenetlify-bot30,836—
@netlify/async-workloads0.0.106noneseanroberts23,786—
@netlify/plugin-agent-runner1.18.0nonenetlify-bot12—
@netlify/e2e1.2.1nonenetlify-bot12—
@netlify/netlify-design-tokens7.1.0nonenetlify-bot104,031—
@netlify/content-engine1.9.1nonenetlify-bot74,359—
@netlify/framework-info10.0.5nonenetlify-bot195,459—
@netlify/plugin-gatsby3.8.4nonenetlify-bot8,515—
@netlify/plugin-dev-server1.7.2nonenetlify-bot93—
@netlify/extensions-mcp1.0.4nonesmnh9—
@netlify/netlify-plugin-netlify-extension1.2.2nonenetlify-bot23,279—
@netlify/ui0.0.23nonenetlify-bot90,734—
@netlify/tailwind-config2.1.0nonenetlify-bot87,349—
@netlify/local-functions-proxy2.0.3nonenetlify-bot418,933—
netlify-redirect-parser14.4.0nonenetlify-bot79,242—
@netlify/cnm-plugin0.7.2nonenetlify-bot12—
@netlify/connect-client0.6.2nonenetlify-bot10—
@netlify/launchdarkly-server-sdk0.1.5nonenetlify-bot10—
@netlify/content-engine-graphiql-explorer1.1.0nonenetlify-bot47,984—
@netlify/plugin-storybook1.4.3nonenetlify-bot25—
@netlify/integrations0.5.4nonenetlify-bot31,625—
@netlify/connect0.0.2nonenetlify-bot9—
@netlify/sentry0.0.10nonenetlify-bot195—
netlify-headers-parser7.1.4nonenetlify-bot54,876—
@netlify/next-runtime5.0.0-alpha.25nonenetlify-bot59—
remlink1.2.0nonenetlify-bot150—
@netlify/ipx1.4.6nonenetlify-bot16,073—
@netlify/planetscale1.1.0nonenetlify-bot165—
@netlify/vite-plugin-netlify-edge1.1.3nonenetlify-bot88—
gatsby-plugin-netlify5.1.1nonenetlify-bot21,436—
netlify-redirector0.5.0noneeduardoboucas549,434—
@netlify/esbuild-wasm0.14.39-1noneskn0tt10—
@netlify/esbuild0.14.39-1noneskn0tt37,734—
@netlify/esbuild-linux-s390x0.14.39-1noneskn0tt12,879—
@netlify/esbuild-linux-arm640.14.39-1noneskn0tt13,347—
@netlify/esbuild-linux-mips64le0.14.39-1noneskn0tt12,963—
@netlify/esbuild-linux-ppc64le0.14.39-1noneskn0tt12,795—
@netlify/esbuild-linux-riscv640.14.39-1noneskn0tt12,788—
@netlify/esbuild-linux-640.14.39-1noneskn0tt36,658—
@netlify/esbuild-linux-320.14.39-1noneskn0tt13,276—
@netlify/esbuild-linux-arm0.14.39-1noneskn0tt12,922—
@netlify/esbuild-android-640.14.39-1noneskn0tt13,265—
@netlify/esbuild-sunos-640.14.39-1noneskn0tt12,624—
@netlify/esbuild-darwin-640.14.39-1noneskn0tt13,420—
@netlify/esbuild-android-arm640.14.39-1noneskn0tt13,350—
@netlify/esbuild-darwin-arm640.14.39-1noneskn0tt13,802—
@netlify/esbuild-openbsd-640.14.39-1noneskn0tt12,695—
@netlify/esbuild-netbsd-640.14.39-1noneskn0tt12,789—
@netlify/esbuild-freebsd-640.14.39-1noneskn0tt13,376—
@netlify/esbuild-freebsd-arm640.14.39-1noneskn0tt13,150—
@netlify/esbuild-windows-320.14.39-1noneskn0tt12,610—
@netlify/esbuild-windows-arm640.14.39-1noneskn0tt12,553—
@netlify/esbuild-windows-640.14.39-1noneskn0tt12,821—
gh-release-fetch4.0.3nonenetlify-bot202,153—
@netlify/next1.4.9nonenetlify-bot2,079—
@netlify/auth00.1.3noneed_stephinson17—
@netlify/node-cookies0.1.0noneeduardoboucas285,656—
@netlify/urlpattern-polyfill6.0.6noneeduardoboucas9—
@netlify/emails1.1.0nonenetlify-bot117—
@netlify/plugin-contentful-buildtime0.0.3noneed_stephinson86—
@netlify/marketing-community-nav1.1.0noneakardet8—
@netlify/netlify-marketing-tokens1.1.0nonenetlify-bot62—
netlify-lambda2.0.16nonenetlify-bot6,997DEPRECATED
@netlify/plugin-changelog-redirects1.0.1nonenetlify-bot9—
@netlify/hydrogen-platform1.1.4nonenetlify-bot62—
@netlify/netlify-plugin-functions-bundling-config2.1.0nonenetlify-bot7—
@netlify/feature-package-pilot0.1.11nonenetlify-bot11—
@netlify/gatsby-runner1.1.14noneascorbic44—
@netlify/eslint-config-node7.0.1nonenetlify-bot19,806—
@netlify/marketing-web-fonts1.0.1nonezachleat9—
@netlify/functions-runtime-api1.1.1noneeduardoboucas10—
create-netlify0.0.1noneascorbic8—
@netlify/binary-info1.0.0nonenetlify-bot684,230—
react-netlify-identity0.2.7noneskn0tt2,380—
@netlify/plugin-a11y1.0.0-beta.1nonedengeist78—
@netlify/plugin-edge-handlers3.0.8nonenetlify-bot20,396—
netlify-cms2.10.192noneerezro1,753—
netlify-cms-app2.15.72noneerezro4,896—
netlify-cms-core2.55.2noneerezro5,092—
netlify-cms-widget-markdown2.15.1noneerezro4,654—
netlify-cms-backend-github2.14.1noneerezro4,634—
netlify-cms-widget-file2.12.1noneerezro4,621—
netlify-cms-lib-util2.15.1noneerezro4,606—
netlify-cms-widget-relation2.11.1noneerezro4,524—
netlify-cms-widget-object2.7.2noneerezro4,487—
netlify-cms-lib-widgets1.8.1noneerezro2,209—
netlify-cms-proxy-server1.3.24noneerezro1,230—
netlify-cms-locales1.39.0noneerezro4,101—
@netlify/plugin-secrets-manager1.1.1nonenetlify-bot10—
netlify-cms-widget-code1.3.4noneerezro3,998—
netlify-cms-ui-default2.15.5noneerezro4,619—
netlify-cms-backend-git-gateway2.13.1noneerezro4,598—
netlify-plugin-debug-cache1.0.4noneehmicky1,701—
netlify-cms-backend-gitlab2.13.0noneerezro4,604—
netlify-cms-widget-map1.5.1noneerezro4,296—
netlify-cms-backend-bitbucket2.14.0noneerezro4,686—
@netlify/plugin-nextjs-experimental0.0.6noneascorbic12DEPRECATED
@netlify/routing-local-proxy0.34.1nonenetlify-bot7,354—
@netlify/routing-local-proxy-win32-x640.34.1nonenetlify-bot2,096—
@netlify/routing-local-proxy-linux-x640.34.1nonenetlify-bot7,233—
@netlify/routing-local-proxy-darwin-x640.34.1nonenetlify-bot2,109—
@netlify/routing-local-proxy-darwin-arm640.34.1nonenetlify-bot2,120—
@netlify/edge-handler-types0.34.1nonenetlify-bot182—
netlify-cms-widget-datetime2.7.4noneerezro4,497—
netlify-cms-widget-date2.6.3noneerezro4,556—
@netlify/plugin-angular-universal1.0.1nonelindsaylevine19—
@netlify/local-functions-proxy-win32-x641.1.1nonenetlify-bot53,937—
@netlify/local-functions-proxy-win32-ia321.1.1nonenetlify-bot38,027—
@netlify/local-functions-proxy-openbsd-x641.1.1nonenetlify-bot37,896—
@netlify/local-functions-proxy-linux-x641.1.1nonenetlify-bot376,656—
@netlify/local-functions-proxy-linux-ppc641.1.1nonenetlify-bot37,909—
@netlify/local-functions-proxy-linux-ia321.1.1nonenetlify-bot38,133—
@netlify/local-functions-proxy-linux-arm641.1.1nonenetlify-bot52,665—
@netlify/local-functions-proxy-linux-arm1.1.1nonenetlify-bot38,365—
@netlify/local-functions-proxy-freebsd-x641.1.1nonenetlify-bot38,381—
@netlify/local-functions-proxy-freebsd-arm641.1.1nonenetlify-bot38,255—
@netlify/local-functions-proxy-darwin-x641.1.1nonenetlify-bot40,591—
@netlify/local-functions-proxy-darwin-arm641.1.1nonenetlify-bot51,352—
netlify-cms-widget-list2.10.1noneerezro4,580—
@netlify/classnames-template-literals1.0.3nonecharliegerard5,162—
@netlify/parse-npm-script0.1.2noneascorbic1,145—
@netlify/local-functions-proxy-windows-x640.1.0noneeduardoboucas8—
@netlify/local-functions-proxy-windows-ia320.1.0noneeduardoboucas9—
@netlify/local-functions-proxy-linux-ppc64le0.1.0noneeduardoboucas8—
@netlify/local-functions-proxy-linux-320.1.0noneeduardoboucas9—
@netlify/local-functions-proxy-linux-640.1.0noneeduardoboucas9—
@netlify/local-functions-proxy-openbsd-640.1.0noneeduardoboucas9—
@netlify/local-functions-proxy-freebsd-640.1.0noneeduardoboucas7—
@netlify/local-functions-proxy-windows-320.1.0noneeduardoboucas7—
@netlify/local-functions-proxy-windows-640.1.0noneeduardoboucas10—
@netlify/local-functions-proxy-darwin-640.1.0noneeduardoboucas8—
@netlify/netlify-cms-widget-parent1.0.12noneerezro26—
netlify-cms-backend-test2.11.3noneerezro4,503—
netlify-cms-widget-image2.8.1noneerezro4,544—
netlify-cms-lib-auth2.4.2noneerezro4,444—
netlify-cms-backend-proxy1.2.3noneerezro2,150—
netlify-cms-widget-select2.8.2noneerezro4,477—
netlify-cms-widget-text2.4.1noneerezro4,398—
netlify-cms-widget-boolean2.4.1noneerezro4,403—
netlify-cms-widget-number2.5.0noneerezro4,414—
netlify-cms-widget-string2.3.0noneerezro4,408—
netlify-cms-default-exports2.4.0noneerezro10—
netlify-cms-editor-component-image2.7.0noneerezro4,409—
@netlify/tailwindcss-first-line1.0.1nonecharliegerard10—
@netlify/plugin-sitemap0.8.1noneerezro8,309—
@netlify/netlitest-helper0.2.5nonefuturegerald8—
netlify-cms-media-library-cloudinary1.3.10noneerezro956—
netlify-cms-media-library-uploadcare0.5.10noneerezro1,066—
@netlify/traffic-mesh-agent0.27.10nonecalavera9,818—
@netlify/traffic-mesh-agent-win32-x640.27.10nonecalavera3,834—
@netlify/traffic-mesh-agent-linux-x640.27.10nonecalavera9,993—
@netlify/traffic-mesh-agent-darwin-x640.27.10nonecalavera3,843—
@netlify/netlify-colors1.1.0nonelesliecdubs10DEPRECATED
netlify-plugin-deploy-preview-commenting0.0.1-alpha.16noneehmicky7,266DEPRECATED
@netlify/plugin-next0.0.4nonedavidwells11DEPRECATED
netlify-plugin-search-index0.1.6nonesw-yx12—
netlify-plugin-a11y0.0.12noneehmicky379—
netlify-plugin-rss0.0.8nonesw-yx11—
netlify-plugin-no-more-4040.0.15nonesw-yx148—
netlify-plugin-encrypted-files0.0.5nonesw-yx7—
react-netlify-identity-widget0.2.7nonesw-yx62—
@netlify/sitemap-plugin0.0.4nonedavidwells9—
gocommerce-js5.0.0nonemarcus.netlify36—
@netlify/cli-utils1.1.0nonesw-yx460—
netlify-dev-plugin1.0.28noneraeesbhatti327DEPRECATED
@netlify/rules-proxy0.1.4nonesw-yx293—
netlify-cli-logo1.0.0nonesw-yx1,414—
vue-cli-plugin-netlify-lambda0.1.1noneshortdiv29—
netlify-lm-plugin1.0.0nonecalavera11—
micro-api-client3.3.0nonebret369,218—
netlifys_api_definition0.2.0nonebret10—
@netlify/parse-domain2.0.0noneimorente13—
netlify-setup-heuristics1.2.5nonecalavera8—