npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of vercel, generated . This is a read-only snapshot.
Run your own audit →

Audit of vercel

Re-run this audit
Tracking daily next

Progress over time

Strong trust
19.7% (35) staged or trusted
Any trust
21.3% (38) incl. provenance
No trust signal
78.7% (140) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/248/268/289/19/39/8
  1. 38/178 any trust
  2. ...
    38/178 any trust
  3. ...
    38/178 any trust
  4. 37/178 any trust
  5. ...
    37/178 any trust
  6. 37/177 any trust
  7. ... [viewing]
    37/177 any trust
    1. [viewing]
  8. 37/176 any trust
  9. 37/176 any trust
  10. 37/176 any trust
  11. 37/176 any trust
  12. 36/176 any trust
In scope
177
Staged publish
0
Trusted publisher
34
Provenance only
3
No trust signal
140
Deprecated latest
8
177 packages · click a column to sort
Package trust level report
@vercel/slack-bolt1.6.4trusted publisherGitHub Actions49,184
@vercel/geistdocs1.25.2noneGitHub Actions35,942
vercel59.9.1noneGitHub Actions3,838,903
@vercel/rust5.0.1noneGitHub Actions3,354,855
@vercel/node9.0.1noneGitHub Actions4,486,339
@vercel/express4.0.1noneGitHub Actions3,483,772
@vercel/koa4.0.1noneGitHub Actions3,225,053
@vercel/go7.0.1noneGitHub Actions3,713,147
@vercel/nestjs4.0.1noneGitHub Actions3,346,052
@vercel/elysia4.0.1noneGitHub Actions3,353,697
@vercel/static-build6.0.1noneGitHub Actions3,741,381
@vercel/hono4.0.1noneGitHub Actions3,497,159
@vercel/h34.0.1noneGitHub Actions3,395,848
@vercel/remix-builder9.0.1noneGitHub Actions3,693,205
@vercel/fastify4.0.1noneGitHub Actions3,355,083
@vercel/hydrogen5.0.1noneGitHub Actions3,691,434
@vercel/build-utils14.6.1noneGitHub Actions4,955,427
@vercel/container4.0.1noneGitHub Actions2,266,258
@vercel/cervel0.1.56noneGitHub Actions3,392,650
@vercel/ruby6.0.1noneGitHub Actions3,685,810
@vercel/gatsby-plugin-vercel-builder2.2.49noneGitHub Actions3,731,563
@vercel/redwood6.0.1noneGitHub Actions3,702,881
@vercel/python10.0.1noneGitHub Actions3,748,861
@vercel/next8.0.1noneGitHub Actions3,804,383
@vercel/backends4.0.1noneGitHub Actions3,363,723
@vercel/fs-detectors7.1.4noneGitHub Actions255,064
@vercel/client18.2.21noneGitHub Actions42,178
@vercel/config0.7.0noneGitHub Actions307,124
@vercel/vc-native-linux-x6459.9.1noneGitHub Actions1,460,230
@vercel/vc-native59.9.1noneGitHub Actions2,095
@vercel/vc-native-linux-arm6459.9.1noneGitHub Actions124,316
@vercel/vc-native-darwin-x6459.9.1noneGitHub Actions93,073
@vercel/vc-native-darwin-arm6459.9.1noneGitHub Actions305,643
@vercel/sdk1.28.24trusted publisherGitHub Actions469,998
create-v0-sdk-app3.0.6trusted publisherGitHub Actions583
v03.0.6trusted publisherGitHub Actions16,121
sandbox4.2.0trusted publisherGitHub Actions3,065,832
@vercel/sandbox3.2.0trusted publisherGitHub Actions4,404,926
@vercel/sandbox-mock3.2.0trusted publisherGitHub Actions12,102
@vercel/queue0.5.1noneGitHub Actions1,331,422
@vercel/static-config3.4.3noneGitHub Actions4,335,664
@vercel/react-router1.3.6noneGitHub Actions132,653
ai7.0.83trusted publisherGitHub Actions23,497,416
@vercel/schedules0.0.0nonevercel-release-bot316
agent-browser0.35.1trusted publisherGitHub Actions1,307,196
run2.0.3trusted publisherGitHub Actions80,506
@vercel/connect2.0.0noneGitHub Actions350,903
@vercel/frameworks3.33.0noneGitHub Actions786,696
@vercel/flags-core1.8.0trusted publisherGitHub Actions581,350
@vercel/agent-eval2.2.1trusted publisherGitHub Actions125,551
next16.3.3trusted publisherGitHub Actions55,016,417
workflow4.8.5trusted publisherGitHub Actions1,028,749
libfx0.0.6trusted publisherGitHub Actions7,359
@vercel/og1.0.2noneGitHub Actions1,843,343
streamdown2.6.0trusted publisherGitHub Actions6,551,190
satori0.33.4trusted publisherGitHub Actions3,385,147
@vercel/agent-readability0.6.0noneGitHub Actions76,154
@vercel/oidc3.8.5noneGitHub Actions29,139,151
@vercel/cli-config0.2.4noneGitHub Actions6,978,788
@vercel/cli-auth0.3.5noneGitHub Actions3,176,674
@vercel/python-analysis0.14.0noneGitHub Actions3,645,191
@vercel/functions3.9.5noneGitHub Actions6,308,940
@vercel/aws0.2.12noneGitHub Actions66
@vercel/oidc-aws-credentials-provider3.3.5noneGitHub Actions280,556
@vercel/kms0.1.1noneGitHub Actions127
@vercel/webpack-asset-relocator-loader1.11.0trusted publisherGitHub Actions314,592
@vercel/nft1.11.0trusted publisherGitHub Actions9,431,318
remote-components0.4.15noneGitHub Actions18,327
mcp-handler2.1.1trusted publisherGitHub Actions936,595
@vercel/routing-utils6.5.0noneGitHub Actions1,110,739
@vercel/ncc0.45.0trusted publisherGitHub Actions1,046,365
@vercel/edge1.3.3noneGitHub Actions749,521
@vercel/detect-agent1.2.5noneGitHub Actions3,715,945
@vercel/firewall1.2.5noneGitHub Actions164,858
@vercel/blob2.8.0trusted publisherGitHub Actions6,434,681
@vercel/edge-config1.5.1trusted publisherGitHub Actions1,057,444
@vercel/global-config1.5.1trusted publisherGitHub Actions123,337
@vercel/global-config-fs0.1.0noneandybitz202,578
flags4.3.0trusted publisherGitHub Actions1,110,344
@vercel/related-projects1.1.1noneGitHub Actions72,253
@vercel/passport1.0.1noneGitHub Actions25,729
@vercel/gatsby-plugin-vercel-analytics1.0.12noneGitHub Actions3,367,023
@vercel/error-utils2.2.1noneGitHub Actions4,687,351
@vercel/cli-exec1.0.1noneGitHub Actions5,712,719
v0-sdk0.16.7trusted publisherGitHub Actions35,403
@vercel/vc-native-win32-x6458.4.0trusted publisherGitHub Actions416
@vercel/toolbar0.2.7noneGitHub Actions460,048
@vercel/microfrontends2.4.0trusted publisherGitHub Actions943,399
@vercel/prepare-flags-definitions0.4.0trusted publisherGitHub Actions3,099,122
@vercel/error0.0.2noneGitHub Actions6
@vercel/otel2.1.3trusted publisherGitHub Actions2,286,603
experimental-ash0.64.1noneGitHub Actions1,985
create-experimental-ash-agent0.7.0noneGitHub Actions0
next-forge6.0.3trusted publisherGitHub Actions450
@vercel/vclaw0.3.10trusted publisherGitHub Actions1
mixpart0.0.6noneGitHub Actions2,058,598
@vercel/connex0.0.11noneGitHub Actions1
@vercel/next-browser0.7.1nonejudegao22,112
@vercel/ai-sdk-openai-websocket-fetch1.0.0nonevercel-release-bot6,150
@vercel/stega1.1.0nonevercel-release-bot2,480,190
@vercel/analytics2.0.1nonevercel-release-bot5,999,496
ai-elements1.9.0trusted publisherGitHub Actions94,320
@vercel/fun1.3.1nonevercel-release-bot3,564,477
@vercel/speed-insights2.0.0nonevercel-release-bot3,919,389
@vercel/cosmosdb-server1.0.1nonevercel-release-bot196,171
botid1.5.11nonevercel-release-bot705,983
@vercel/nextdocfs0.5.1nonejudegao0
@vercel/kv20.0.19nonecramforce168
@vercel/dream0.4.0noneGitHub Actions0
@vercel/beautiful-mermaid0.1.5nonejohnphamous5,745
@vercel/mcp-adapter0.3.2provenancevercel-release-bot74,071
@vercel/create-dream0.2.2noneadriancooney_vercel0
@vercel/dream-init0.2.2noneadriancooney_vercel0
@vercel/agent-eval-playground0.1.3trusted publisherGitHub Actions1,327
@vercel/introspection0.0.13provenancevercel-release-bot165,441
@vercel/v00.0.1-alpha.1nonefernandorojo3
@vercel/before-and-after0.0.4nonejamesvclements3,531
@vercel/sandbox-cli1.1.1nonevercel-release-bot2,343DEPRECATED
@vercel/examples-ui2.0.4nonevercel-release-bot1,081
react-chatgpt-hooks0.0.1nonequuu1
@vercel/platforms1.0.0nonehaydenbleasel66
@vercel/ade0.0.24nonerobpruzan5
mcp-to-ai-sdk0.1.1nonevercel-release-bot70
@vercel/remix-run-dev2.16.7nonevercel-release-bot5,873
@vercel/remix2.16.7nonevercel-release-bot46,146
@vercel/repository-dispatch-status0.0.1nonevercel-release-bot1
@vercel/repository-dispatch-checkout0.0.1nonevercel-release-bot3
@vercel/ai-sdk-gateway0.1.10nonevercel-release-bot99DEPRECATED
@vercel/repository-dispatch0.1.0nonevercel-release-bot47
@vercel/flags3.1.1nonevercel-release-bot208,344DEPRECATED
@vercel/sqs-consumer5.7.0nonemglagola13
@vercel/devlow-bench0.3.5provenancevercel-release-bot2,644
@vercel/kv3.0.0nonevercel-release-bot439,666DEPRECATED
@vercel/postgres-kysely0.10.0nonevercel-release-bot2,879DEPRECATED
@vercel/postgres0.10.0nonevercel-release-bot383,784DEPRECATED
@vercel/style-guide6.0.0nonevercel-release-bot354,846
@vercel/remote-nx2.0.0nonevercel-release-bot18,555
@vercel/fetch7.0.0nonevercel-release-bot498,701
@vercel/visual-editing0.0.1nonevercel-release-bot0
@vercel/ai-utils0.0.2nonejaredpalmer29
@vercel/edge-config-fs0.1.0nonevercel-release-bot840,677
@vercel/remix-entry-server0.1.1nonevercel-release-bot244
@vercel/node-bridge4.0.1nonevercel-release-bot37,912
@vercel/algolite0.3.0-canary.1noneofhouse3
@vercel/experimental-nft-next-plugin0.0.1nonevercel-release-bot10
@vercel/fetch-cached-dns2.1.2nonevercel-release-bot330,650
@vercel/remote-rush1.0.1nonevercel-release-bot156,295
@vercel/remote1.0.1nonevercel-release-bot175,059
@vercel/webpack-nft0.0.14nonevercel-release-bot7
@vercel/nft-next-plugin0.0.13nonevercel-release-bot2
@vercel/experimental-nft0.0.4nonevercel-release-bot7
@vercel/experimental-nft-win32-x640.0.4nonevercel-release-bot10
@vercel/experimental-nft-darwin-arm640.0.4nonevercel-release-bot10
@vercel/experimental-nft-darwin-x640.0.4nonevercel-release-bot8
@vercel/experimental-nft-linux-x640.0.4nonevercel-release-bot9
@vercel/wireguard0.0.7noneemeraldsanto8
@vercel/examples-ui-svelte0.1.16nonegbibeaulaviolette0
@vercel/satori-node0.0.22nonestyfle2
@vercel/satori-core0.0.22nonestyfle3
@vercel/edge-jest-environment0.12.4nonekikobeats1
@vercel/edge-runtime0.12.4nonekikobeats32DEPRECATED
@vercel/edge-vm0.12.4nonekikobeats35
@vercel/edge-types0.12.4nonekikobeats0
@vercel/edge-primitives0.12.4nonekikobeats62
@vercel/edge-format0.12.2nonekikobeats37
@vercel/format0.11.0nonekikobeats2
@vercel/fetch-retry5.1.3noneethan_arrowood341,915
@vercel/mdx-deck-theme0.3.1nonedav-is1
@vercel/edge-functions-ui0.2.1nonelfades2,077
async-sema3.1.1noneleerobinson9,680,496
@vercel/tracing-js0.5.1nonestyfle37DEPRECATED
@vercel/git-hooks1.0.0noneleerobinson25,529
@vercel/cgi1.0.7nonezeit-bot0
@vercel/docs-generator0.2.0nonequietshu6
@vercel/integration-utils0.6.5-canary.0nonetootallnate1
vercel-client1.0.0noneleo1
vc0.1.4nonelepture496