npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of preactjs, generated . This is a read-only snapshot.
Run your own audit →

Audit of preactjs

Re-run this audit
Tracking daily next

Progress over time

Strong trust
28.3% (13) staged or trusted
Any trust
28.3% (13) incl. provenance
No trust signal
71.7% (33) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/2510/1010/22
  1. ...
    13/46 any trust
  2. 13/46 any trust
  3. 13/46 any trust
  4. 13/46 any trust
  5. 13/46 any trust
  6. ...
    13/46 any trust
  7. ...
    13/46 any trust
  8. 13/46 any trust
  9. ... [viewing]
    13/46 any trust
    1. [viewing]
  10. 13/46 any trust
  11. ...
    13/46 any trust
  12. 13/46 any trust
  13. ...
    13/46 any trust
  14. ...
    13/46 any trust
  15. ...
    13/46 any trust
  16. ...
    13/46 any trust
  17. ...
    13/46 any trust
  18. ...
    13/46 any trust
  19. ...
    13/46 any trust
  20. ...
    13/46 any trust
  21. ...
    13/46 any trust
  22. ...
    13/46 any trust
  23. ...
    13/46 any trust
  24. 13/46 any trust
  25. 13/46 any trust
In scope
46
Staged publish
13
Trusted publisher
0
Provenance only
0
No trust signal
33
Deprecated latest
0
46 packages · click a column to sort
Package trust level report
preact11.0.1staged publishGitHub Actions37,513,131—
preact-render-to-string6.8.0staged publishGitHub Actions9,562,252—
@preact/signals-preact-transform0.1.2staged publishGitHub Actions2,590—
@preact/signals2.11.3staged publishGitHub Actions2,551,056—
@preact/signals-react-transform0.8.3staged publishGitHub Actions67,754—
create-preact0.6.0nonerschristian134—
@preact/signals-react3.12.0staged publishGitHub Actions288,078—
@preact/signals-agent-vite0.1.3staged publishGitHub Actions21—
@preact/signals-devtools-ui0.5.0staged publishGitHub Actions3,114—
@preact/signals-devtools-adapter0.5.0staged publishGitHub Actions3,104—
@preact/signals-debug1.5.0staged publishGitHub Actions23,467—
@preact/preset-vite2.10.6staged publishGitHub Actions764,691—
@preact/signals-core1.14.4staged publishGitHub Actions9,509,974—
@preact/eslint-plugin-signals0.3.0staged publishGitHub Actions10,107—
@preact/compat18.3.2nonejdecroock409,277—
eslint-config-preact2.0.0nonejdecroock30,734—
@preact/legacy-compat0.3.0nonejdecroock15—
preact-ssr-prepass1.2.2nonerschristian3,821—
jest-preset-preact4.1.1nonerschristian22,781—
preact-cli3.5.1nonerschristian5,145—
create-preact-cli0.1.1nonerschristian6—
preact-router4.1.2nonerschristian36,695—
@preact/playwright-ct0.1.1nonejdecroock7—
@preact/async-loader3.0.2nonepreactjs3,546—
babel-plugin-transform-hook-names1.0.2nonemarvinhagemeister599,299—
linkstate2.0.1nonedevelopit2,422—
babel-plugin-transform-rename-properties0.1.0nonejviide3,284—
@preact/prerender-data-provider3.0.1noneprateekbh14—
preact-transition-group2.0.0nonedevelopit58,549—
@preact/cli0.0.4-alpha.0nonesolarliner5—
@preact/cli-plugin-typescript0.0.4-alpha.0nonesolarliner6—
@preact/cli-plugin-stylus0.0.4-alpha.0nonesolarliner5—
@preact/cli-plugin-eslint0.0.4-alpha.0nonesolarliner4—
@preact/cli-plugin-legacy-config0.0.4-alpha.0nonesolarliner3—
@preact/cli-plugin-sass0.0.4-alpha.0nonesolarliner9—
@preact/cli-plugin-less0.0.4-alpha.0nonesolarliner6—
jest-preact-preset1.0.0nonemarvinhagemeister39—
preact-jsx-chai2.3.2nonedevelopit484—
babel-preset-preact2.0.0nonedevelopit5,194—
preact-compat3.19.0nonedevelopit59,620—
babel-plugin-transform-replace-expressions0.2.0nonejviide115,194—
linkref1.1.0nonedevelopit10—
preact-portal1.1.3nonedevelopit1,052—
preact-css-transition-group1.3.0nonedevelopit2,542—
create-preact-app0.2.0nonealexkuz8—
preact-svg1.6.0nonedevelopit82—