npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of vercel, generated . This is a read-only snapshot.
Run your own audit →

Audit of vercel

Re-run this audit
Tracking daily next

Progress over time

Strong trust
19.7% (35) staged or trusted
Any trust
21.3% (38) incl. provenance
No trust signal
78.7% (140) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/248/269/19/39/79/8
  1. 38/178 any trust
  2. ... [viewing]
    38/178 any trust
    1. [viewing]
  3. ...
    38/178 any trust
  4. 37/178 any trust
  5. ...
    37/178 any trust
  6. 37/177 any trust
  7. ...
    37/177 any trust
  8. 37/176 any trust
  9. 37/176 any trust
  10. 37/176 any trust
  11. 37/176 any trust
  12. 36/176 any trust
In scope
178
Staged publish
0
Trusted publisher
35
Provenance only
3
No trust signal
140
Deprecated latest
8
178 packages · click a column to sort
Package trust level report
run2.1.3trusted publisherGitHub Actions87,373
@vercel/sdk1.28.28trusted publisherGitHub Actions307,963
ai7.0.93trusted publisherGitHub Actions21,639,648
vercel59.11.7noneGitHub Actions2,646,372
@vercel/static-build9.0.1noneGitHub Actions3,278,607
@vercel/go10.0.1noneGitHub Actions2,586,502
@vercel/elysia7.0.1noneGitHub Actions2,956,494
@vercel/node12.0.1noneGitHub Actions4,002,592
@vercel/build-utils14.9.1noneGitHub Actions4,578,739
@vercel/fastify7.0.1noneGitHub Actions2,957,967
@vercel/h37.0.1noneGitHub Actions2,994,316
@vercel/ruby9.0.1noneGitHub Actions3,271,692
@vercel/nestjs7.0.1noneGitHub Actions2,326,424
@vercel/koa7.0.1noneGitHub Actions2,854,627
@vercel/python13.0.1noneGitHub Actions3,282,270
@vercel/cervel0.1.61noneGitHub Actions3,003,345
@vercel/hono7.0.1noneGitHub Actions3,079,598
@vercel/container7.0.1noneGitHub Actions2,096,377
@vercel/rust8.0.1noneGitHub Actions2,946,385
@vercel/express7.0.2noneGitHub Actions3,089,538
@vercel/backends7.0.2noneGitHub Actions2,987,052
@vercel/next11.0.2noneGitHub Actions2,611,645
@vercel/hydrogen8.0.1noneGitHub Actions3,260,446
@vercel/gatsby-plugin-vercel-builder2.2.53noneGitHub Actions3,268,685
@vercel/remix-builder12.0.1noneGitHub Actions3,259,532
@vercel/redwood9.0.1noneGitHub Actions3,272,140
@vercel/fs-detectors7.2.1noneGitHub Actions245,071
@vercel/connect2.0.2noneGitHub Actions405,794
@vercel/client18.3.2noneGitHub Actions41,048
@vercel/vc-native-linux-x6459.11.7noneGitHub Actions1,388,092
@vercel/error0.0.4trusted publisherGitHub Actions275
@vercel/vc-native59.11.7noneGitHub Actions1,102
@vercel/slack-bolt1.6.5trusted publisherGitHub Actions48,301
@vercel/vc-native-linux-arm6459.11.7noneGitHub Actions78,926
@vercel/vc-native-darwin-x6459.11.7noneGitHub Actions64,852
@vercel/vc-native-darwin-arm6459.11.7noneGitHub Actions245,751
@vercel/geistdocs1.26.1noneGitHub Actions35,419
@vercel/factory0.0.14noneGitHub Actions1,238
@vercel/agent-readability0.7.0noneGitHub Actions40,340
@vercel/frameworks3.34.0noneGitHub Actions916,315
agent-browser0.36.0trusted publisherGitHub Actions1,247,142
next16.3.4trusted publisherGitHub Actions40,645,752
libfx0.0.7trusted publisherGitHub Actions1,271
@vercel/sandbox3.2.1trusted publisherGitHub Actions3,079,776
sandbox4.2.1trusted publisherGitHub Actions2,606,945
@vercel/sandbox-mock3.2.1trusted publisherGitHub Actions4,296
@vercel/config0.7.0noneGitHub Actions318,238
create-v0-sdk-app3.0.6trusted publisherGitHub Actions212
v03.0.6trusted publisherGitHub Actions19,750
@vercel/queue0.5.1noneGitHub Actions1,306,096
@vercel/static-config3.4.3noneGitHub Actions3,096,698
@vercel/react-router1.3.6noneGitHub Actions96,530
@vercel/schedules0.0.0nonevercel-release-bot179
@vercel/flags-core1.8.0trusted publisherGitHub Actions606,719
@vercel/agent-eval2.2.1trusted publisherGitHub Actions77,573
workflow4.8.5trusted publisherGitHub Actions789,765
@vercel/og1.0.2noneGitHub Actions1,846,076
streamdown2.6.0trusted publisherGitHub Actions4,384,049
satori0.33.4trusted publisherGitHub Actions2,731,155
@vercel/oidc3.8.5noneGitHub Actions21,570,500
@vercel/cli-config0.2.4noneGitHub Actions6,626,960
@vercel/cli-auth0.3.5noneGitHub Actions2,283,726
@vercel/python-analysis0.14.0noneGitHub Actions3,205,673
@vercel/functions3.9.5noneGitHub Actions5,851,837
@vercel/aws0.2.12noneGitHub Actions213
@vercel/oidc-aws-credentials-provider3.3.5noneGitHub Actions217,673
@vercel/kms0.1.1noneGitHub Actions119
@vercel/webpack-asset-relocator-loader1.11.0trusted publisherGitHub Actions214,565
@vercel/nft1.11.0trusted publisherGitHub Actions8,570,368
remote-components0.4.15noneGitHub Actions11,586
mcp-handler2.1.1trusted publisherGitHub Actions708,017
@vercel/routing-utils6.5.0noneGitHub Actions1,094,051
@vercel/ncc0.45.0trusted publisherGitHub Actions837,527
@vercel/edge1.3.3noneGitHub Actions549,749
@vercel/detect-agent1.2.5noneGitHub Actions2,650,719
@vercel/firewall1.2.5noneGitHub Actions107,586
@vercel/blob2.8.0trusted publisherGitHub Actions4,655,397
@vercel/edge-config1.5.1trusted publisherGitHub Actions716,093
@vercel/global-config1.5.1trusted publisherGitHub Actions81,034
@vercel/global-config-fs0.1.0noneandybitz139,437
flags4.3.0trusted publisherGitHub Actions810,543
@vercel/related-projects1.1.1noneGitHub Actions52,989
@vercel/passport1.0.1noneGitHub Actions22,947
@vercel/gatsby-plugin-vercel-analytics1.0.12noneGitHub Actions2,955,640
@vercel/error-utils2.2.1noneGitHub Actions4,303,752
@vercel/cli-exec1.0.1noneGitHub Actions4,488,106
v0-sdk0.16.7trusted publisherGitHub Actions23,208
@vercel/vc-native-win32-x6458.4.0trusted publisherGitHub Actions399
@vercel/toolbar0.2.7noneGitHub Actions401,299
@vercel/microfrontends2.4.0trusted publisherGitHub Actions854,956
@vercel/prepare-flags-definitions0.4.0trusted publisherGitHub Actions2,167,683
@vercel/otel2.1.3trusted publisherGitHub Actions2,187,202
experimental-ash0.64.1noneGitHub Actions1,820
create-experimental-ash-agent0.7.0noneGitHub Actions25
next-forge6.0.3trusted publisherGitHub Actions56
@vercel/vclaw0.3.10trusted publisherGitHub Actions11
mixpart0.0.6noneGitHub Actions1,288,706
@vercel/connex0.0.11noneGitHub Actions33
@vercel/next-browser0.7.1nonejudegao26,329
@vercel/ai-sdk-openai-websocket-fetch1.0.0nonevercel-release-bot4,862
@vercel/stega1.1.0nonevercel-release-bot2,093,486
@vercel/analytics2.0.1nonevercel-release-bot5,885,974
ai-elements1.9.0trusted publisherGitHub Actions86,878
@vercel/fun1.3.1nonevercel-release-bot2,422,498
@vercel/speed-insights2.0.0nonevercel-release-bot3,832,562
@vercel/cosmosdb-server1.0.1nonevercel-release-bot169,673
botid1.5.11nonevercel-release-bot718,215
@vercel/nextdocfs0.5.1nonejudegao5
@vercel/kv20.0.19nonecramforce163
@vercel/dream0.4.0noneGitHub Actions51
@vercel/beautiful-mermaid0.1.5nonejohnphamous2,589
@vercel/mcp-adapter0.3.2provenancevercel-release-bot41,208
@vercel/create-dream0.2.2noneadriancooney_vercel4
@vercel/dream-init0.2.2noneadriancooney_vercel4
@vercel/agent-eval-playground0.1.3trusted publisherGitHub Actions933
@vercel/introspection0.0.13provenancevercel-release-bot126,263
@vercel/v00.0.1-alpha.1nonefernandorojo10
@vercel/before-and-after0.0.4nonejamesvclements2,405
@vercel/sandbox-cli1.1.1nonevercel-release-bot1,080DEPRECATED
@vercel/examples-ui2.0.4nonevercel-release-bot406
react-chatgpt-hooks0.0.1nonequuu8
@vercel/platforms1.0.0nonehaydenbleasel113
@vercel/ade0.0.24nonerobpruzan49
mcp-to-ai-sdk0.1.1nonevercel-release-bot47
@vercel/remix-run-dev2.16.7nonevercel-release-bot3,604
@vercel/remix2.16.7nonevercel-release-bot33,779
@vercel/repository-dispatch-status0.0.1nonevercel-release-bot5
@vercel/repository-dispatch-checkout0.0.1nonevercel-release-bot2
@vercel/ai-sdk-gateway0.1.10nonevercel-release-bot157DEPRECATED
@vercel/repository-dispatch0.1.0nonevercel-release-bot101
@vercel/flags3.1.1nonevercel-release-bot65,999DEPRECATED
@vercel/sqs-consumer5.7.0nonemglagola29
@vercel/devlow-bench0.3.5provenancevercel-release-bot1,611
@vercel/kv3.0.0nonevercel-release-bot322,949DEPRECATED
@vercel/postgres-kysely0.10.0nonevercel-release-bot1,124DEPRECATED
@vercel/postgres0.10.0nonevercel-release-bot214,851DEPRECATED
@vercel/style-guide6.0.0nonevercel-release-bot277,898
@vercel/remote-nx2.0.0nonevercel-release-bot9,881
@vercel/fetch7.0.0nonevercel-release-bot531,754
@vercel/visual-editing0.0.1nonevercel-release-bot2
@vercel/ai-utils0.0.2nonejaredpalmer71
@vercel/edge-config-fs0.1.0nonevercel-release-bot410,845
@vercel/remix-entry-server0.1.1nonevercel-release-bot110
@vercel/node-bridge4.0.1nonevercel-release-bot30,421
@vercel/algolite0.3.0-canary.1noneofhouse1
@vercel/experimental-nft-next-plugin0.0.1nonevercel-release-bot12
@vercel/fetch-cached-dns2.1.2nonevercel-release-bot346,747
@vercel/remote-rush1.0.1nonevercel-release-bot72,882
@vercel/remote1.0.1nonevercel-release-bot86,331
@vercel/webpack-nft0.0.14nonevercel-release-bot16
@vercel/nft-next-plugin0.0.13nonevercel-release-bot18
@vercel/experimental-nft0.0.4nonevercel-release-bot13
@vercel/experimental-nft-win32-x640.0.4nonevercel-release-bot13
@vercel/experimental-nft-darwin-arm640.0.4nonevercel-release-bot10
@vercel/experimental-nft-darwin-x640.0.4nonevercel-release-bot13
@vercel/experimental-nft-linux-x640.0.4nonevercel-release-bot14
@vercel/wireguard0.0.7noneemeraldsanto44
@vercel/examples-ui-svelte0.1.16nonegbibeaulaviolette39
@vercel/satori-node0.0.22nonestyfle8
@vercel/satori-core0.0.22nonestyfle6
@vercel/edge-jest-environment0.12.4nonekikobeats29
@vercel/edge-runtime0.12.4nonekikobeats41DEPRECATED
@vercel/edge-vm0.12.4nonekikobeats33
@vercel/edge-types0.12.4nonekikobeats13
@vercel/edge-primitives0.12.4nonekikobeats50
@vercel/edge-format0.12.2nonekikobeats13
@vercel/format0.11.0nonekikobeats3
@vercel/fetch-retry5.1.3noneethan_arrowood288,023
@vercel/mdx-deck-theme0.3.1nonedav-is4
@vercel/edge-functions-ui0.2.1nonelfades1,117
async-sema3.1.1noneleerobinson8,758,057
@vercel/tracing-js0.5.1nonestyfle36DEPRECATED
@vercel/git-hooks1.0.0noneleerobinson7,769
@vercel/cgi1.0.7nonezeit-bot9
@vercel/docs-generator0.2.0nonequietshu27
@vercel/integration-utils0.6.5-canary.0nonetootallnate10
vercel-client1.0.0noneleo6
vc0.1.4nonelepture256