npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of vercel, generated . This is a read-only snapshot.
Run your own audit →

Audit of vercel

Re-run this audit
Tracking daily next
Share to Bluesky

Progress over time

Strong trust
20.7% (39) staged or trusted
Any trust
21.8% (41) incl. provenance
No trust signal
78.2% (147) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/249/39/169/239/2910/710/16
  1. 41/188 any trust
  2. ...
    40/187 any trust
  3. 40/187 any trust
  4. 40/187 any trust
  5. 40/187 any trust
  6. 40/187 any trust
  7. ...
    40/187 any trust
  8. ...
    40/186 any trust
  9. 40/186 any trust
  10. 40/186 any trust
  11. ...
    37/186 any trust
  12. 37/179 any trust
  13. 37/179 any trust
  14. ... [viewing]
    37/179 any trust
    3. [viewing]
  15. 37/179 any trust
  16. 37/179 any trust
  17. 37/179 any trust
  18. ...
    37/179 any trust
  19. ...
    37/179 any trust
  20. 38/178 any trust
  21. 38/178 any trust
  22. 38/178 any trust
  23. 38/178 any trust
  24. ...
    38/178 any trust
  25. ...
    38/178 any trust
  26. ...
    38/178 any trust
  27. ...
    38/178 any trust
  28. ...
    38/178 any trust
  29. 37/178 any trust
  30. ...
    37/178 any trust
  31. 37/177 any trust
  32. ...
    37/177 any trust
  33. 37/176 any trust
  34. 37/176 any trust
  35. 37/176 any trust
  36. 37/176 any trust
  37. 36/176 any trust
In scope
179
Staged publish
0
Trusted publisher
34
Provenance only
3
No trust signal
142
Deprecated latest
11
179 packages · click a column to sort
Package trust level report
@vercel/fs-detectors7.6.2noneGitHub Actions217,917—
vercel59.25.4noneGitHub Actions2,927,746—
@vercel/container8.4.0noneGitHub Actions1,847,527—
@vercel/vc-native-win32-x6459.25.4noneGitHub Actions148,151—
@vercel/vc-native-darwin-arm6459.25.4noneGitHub Actions222,591—
@vercel/vc-native-win32-arm6459.25.4noneGitHub Actions23,703—
@vercel/vc-native59.25.4noneGitHub Actions1,600—
@vercel/vc-native-linux-x6459.25.4noneGitHub Actions1,324,859—
@vercel/vc-native-darwin-x6459.25.4noneGitHub Actions60,130—
@vercel/vc-native-linux-arm6459.25.4noneGitHub Actions90,397—
ai7.0.111trusted publisherGitHub Actions17,883,737—
@vercel/remix-builder13.0.2noneGitHub Actions2,659,961—
@vercel/static-build10.0.2noneGitHub Actions2,673,235—
@vercel/next12.0.5noneGitHub Actions2,815,095—
@vercel/rust9.0.2noneGitHub Actions2,399,068—
@vercel/ruby10.0.2noneGitHub Actions2,674,761—
@vercel/redwood10.0.2noneGitHub Actions2,666,354—
@vercel/koa8.0.2noneGitHub Actions2,310,722—
@vercel/python14.2.1noneGitHub Actions2,767,715—
@vercel/h38.0.2noneGitHub Actions2,436,427—
@vercel/client18.4.2noneGitHub Actions36,699—
@vercel/fastify8.0.2noneGitHub Actions2,409,064—
@vercel/nestjs8.0.2noneGitHub Actions2,401,548—
@vercel/elysia8.0.2noneGitHub Actions2,407,976—
@vercel/hono8.0.2noneGitHub Actions2,500,627—
@vercel/gatsby-plugin-vercel-builder2.2.58noneGitHub Actions2,664,024—
@vercel/express8.0.2noneGitHub Actions2,490,144—
@vercel/build-utils14.10.2noneGitHub Actions3,482,993—
@vercel/backends8.0.2noneGitHub Actions2,414,391—
@vercel/node13.0.2noneGitHub Actions3,233,855—
@vercel/go11.0.2noneGitHub Actions2,679,479—
@vercel/cervel0.1.66noneGitHub Actions2,427,349—
@vercel/hydrogen9.0.2noneGitHub Actions2,658,305—
@vercel/og1.0.3noneGitHub Actions1,436,426—
next16.3.6trusted publisherGitHub Actions42,734,285—
satori0.33.5trusted publisherGitHub Actions2,693,148—
@vercel/oidc-aws-credentials-provider3.3.9noneGitHub Actions278,741—
@vercel/kms0.2.1noneGitHub Actions138—
@vercel/functions3.9.9noneGitHub Actions5,118,207—
@vercel/aws0.2.16noneGitHub Actions109—
@vercel/oidc3.8.9noneGitHub Actions23,100,085—
@vercel/connect2.3.2noneGitHub Actions309,315—
@vercel/cli-auth0.3.9noneGitHub Actions2,579,891—
@vercel/cli-config0.3.0noneGitHub Actions6,187,155—
@vercel/passport1.1.0noneGitHub Actions19,297—
@vercel/flags-core1.8.2trusted publisherGitHub Actions431,777—
run2.1.5trusted publisherGitHub Actions99,869—
@vercel/error0.3.0trusted publisherGitHub Actions9,232—
mcp-handler2.2.0trusted publisherGitHub Actions727,215—
@vercel/geistdocs2.4.1noneGitHub Actions28,403—
@vercel/agent-eval2.3.0trusted publisherGitHub Actions51,685—
@vercel/sdk1.28.35trusted publisherGitHub Actions320,975—
agent-browser0.38.1trusted publisherGitHub Actions1,236,914—
@vercel/factory0.0.15noneGitHub Actions184—
create-v0-sdk-app3.0.7trusted publisherGitHub Actions336—
v03.0.7trusted publisherGitHub Actions19,681—
@vercel/queue0.6.0noneGitHub Actions1,076,699—
@vercel/slack-bolt1.7.0trusted publisherGitHub Actions35,860—
workflow4.8.9trusted publisherGitHub Actions842,208—
@vercel/routing-utils6.6.0noneGitHub Actions833,363—
@vercel/config0.7.1noneGitHub Actions222,405—
libfx0.0.10trusted publisherGitHub Actions1,569—
@vercel/sandbox3.3.0trusted publisherGitHub Actions3,233,197—
sandbox4.4.0trusted publisherGitHub Actions2,163,589—
@vercel/sandbox-mock3.3.0trusted publisherGitHub Actions5,480—
flags4.3.1trusted publisherGitHub Actions826,546—
@vercel/agent-readability0.7.0noneGitHub Actions55,671—
@vercel/frameworks3.34.0noneGitHub Actions661,443—
@vercel/static-config3.4.3noneGitHub Actions3,216,133—
@vercel/react-router1.3.6noneGitHub Actions96,759—
@vercel/schedules0.0.0nonevercel-release-bot146—
streamdown2.6.0trusted publisherGitHub Actions4,399,618—
@vercel/python-analysis0.14.0noneGitHub Actions2,610,912—
@vercel/webpack-asset-relocator-loader1.11.0trusted publisherGitHub Actions258,915—
@vercel/nft1.11.0trusted publisherGitHub Actions6,984,095—
remote-components0.4.15noneGitHub Actions8,912—
@vercel/ncc0.45.0trusted publisherGitHub Actions707,438—
@vercel/edge1.3.3noneGitHub Actions538,512—
@vercel/detect-agent1.2.5noneGitHub Actions2,774,104—
@vercel/firewall1.2.5noneGitHub Actions136,759—
@vercel/blob2.8.0trusted publisherGitHub Actions4,873,718—
@vercel/edge-config1.5.1trusted publisherGitHub Actions723,256DEPRECATED
@vercel/global-config1.5.1trusted publisherGitHub Actions97,778—
@vercel/global-config-fs0.1.0noneandybitz220,241—
@vercel/related-projects1.1.1noneGitHub Actions67,942—
@vercel/gatsby-plugin-vercel-analytics1.0.12noneGitHub Actions2,524,612—
@vercel/error-utils2.2.1noneGitHub Actions3,569,718—
@vercel/cli-exec1.0.1noneGitHub Actions4,973,196—
v0-sdk0.16.7trusted publisherGitHub Actions28,057—
@vercel/toolbar0.2.7noneGitHub Actions322,786—
@vercel/microfrontends2.4.0trusted publisherGitHub Actions701,967—
@vercel/prepare-flags-definitions0.4.0trusted publisherGitHub Actions2,293,034—
@vercel/otel2.1.3trusted publisherGitHub Actions1,754,308—
experimental-ash0.64.1noneGitHub Actions578—
create-experimental-ash-agent0.7.0noneGitHub Actions0—
next-forge6.0.3trusted publisherGitHub Actions28—
@vercel/vclaw0.3.10trusted publisherGitHub Actions1—
mixpart0.0.6noneGitHub Actions1,671,104—
@vercel/connex0.0.11noneGitHub Actions3—
@vercel/next-browser0.7.1nonejudegao18,614—
@vercel/ai-sdk-openai-websocket-fetch1.0.0nonevercel-release-bot4,042—
@vercel/stega1.1.0nonevercel-release-bot1,673,887—
@vercel/analytics2.0.1nonevercel-release-bot4,807,522—
ai-elements1.9.0trusted publisherGitHub Actions74,332—
@vercel/fun1.3.1nonevercel-release-bot2,614,935—
@vercel/speed-insights2.0.0nonevercel-release-bot3,115,944—
@vercel/cosmosdb-server1.0.1nonevercel-release-bot160,009—
botid1.5.11nonevercel-release-bot560,319—
@vercel/nextdocfs0.5.1nonejudegao4—
@vercel/kv20.0.19nonecramforce175—
@vercel/dream0.4.0noneGitHub Actions0—
@vercel/beautiful-mermaid0.1.5nonejohnphamous2,342—
@vercel/mcp-adapter0.3.2provenancevercel-release-bot40,343—
@vercel/create-dream0.2.2noneadriancooney_vercel0—
@vercel/dream-init0.2.2noneadriancooney_vercel0—
@vercel/agent-eval-playground0.1.3trusted publisherGitHub Actions1,125—
@vercel/introspection0.0.13provenancevercel-release-bot117,104—
@vercel/v00.0.1-alpha.1nonefernandorojo24—
@vercel/before-and-after0.0.4nonejamesvclements1,524DEPRECATED
@vercel/sandbox-cli1.1.1nonevercel-release-bot387DEPRECATED
@vercel/examples-ui2.0.4nonevercel-release-bot752—
react-chatgpt-hooks0.0.1nonequuu4—
@vercel/platforms1.0.0nonehaydenbleasel145—
@vercel/ade0.0.24nonerobpruzan0—
mcp-to-ai-sdk0.1.1nonevercel-release-bot60—
@vercel/remix-run-dev2.16.7nonevercel-release-bot6,724—
@vercel/remix2.16.7nonevercel-release-bot29,502—
@vercel/repository-dispatch-status0.0.1nonevercel-release-bot0—
@vercel/repository-dispatch-checkout0.0.1nonevercel-release-bot1—
@vercel/ai-sdk-gateway0.1.10nonevercel-release-bot48DEPRECATED
@vercel/repository-dispatch0.1.0nonevercel-release-bot7—
@vercel/flags3.1.1nonevercel-release-bot53,003DEPRECATED
@vercel/sqs-consumer5.7.0nonemglagola8—
@vercel/devlow-bench0.3.5provenancevercel-release-bot1,453—
@vercel/kv3.0.0nonevercel-release-bot294,711DEPRECATED
@vercel/postgres-kysely0.10.0nonevercel-release-bot3,368DEPRECATED
@vercel/postgres0.10.0nonevercel-release-bot244,831DEPRECATED
@vercel/style-guide6.0.0nonevercel-release-bot208,298—
@vercel/remote-nx2.0.0nonevercel-release-bot12,382—
@vercel/fetch7.0.0nonevercel-release-bot391,738—
@vercel/visual-editing0.0.1nonevercel-release-bot0—
@vercel/ai-utils0.0.2nonejaredpalmer52—
@vercel/edge-config-fs0.1.0nonevercel-release-bot528,508DEPRECATED
@vercel/remix-entry-server0.1.1nonevercel-release-bot123—
@vercel/node-bridge4.0.1nonevercel-release-bot29,689—
@vercel/algolite0.3.0-canary.1noneofhouse1—
@vercel/experimental-nft-next-plugin0.0.1nonevercel-release-bot0—
@vercel/fetch-cached-dns2.1.2nonevercel-release-bot250,334—
@vercel/remote-rush1.0.1nonevercel-release-bot75,123—
@vercel/remote1.0.1nonevercel-release-bot87,644—
@vercel/webpack-nft0.0.14nonevercel-release-bot1—
@vercel/nft-next-plugin0.0.13nonevercel-release-bot0—
@vercel/experimental-nft0.0.4nonevercel-release-bot0—
@vercel/experimental-nft-win32-x640.0.4nonevercel-release-bot0—
@vercel/experimental-nft-darwin-arm640.0.4nonevercel-release-bot0—
@vercel/experimental-nft-darwin-x640.0.4nonevercel-release-bot1—
@vercel/experimental-nft-linux-x640.0.4nonevercel-release-bot0—
@vercel/wireguard0.0.7noneemeraldsanto2—
@vercel/examples-ui-svelte0.1.16nonegbibeaulaviolette6—
@vercel/satori-node0.0.22nonestyfle0—
@vercel/satori-core0.0.22nonestyfle8—
@vercel/edge-jest-environment0.12.4nonekikobeats0—
@vercel/edge-runtime0.12.4nonekikobeats6DEPRECATED
@vercel/edge-vm0.12.4nonekikobeats3—
@vercel/edge-types0.12.4nonekikobeats0—
@vercel/edge-primitives0.12.4nonekikobeats18—
@vercel/edge-format0.12.2nonekikobeats12—
@vercel/format0.11.0nonekikobeats0—
@vercel/fetch-retry5.1.3noneethan_arrowood263,616—
@vercel/mdx-deck-theme0.3.1nonedav-is4—
@vercel/edge-functions-ui0.2.1nonelfades1,454—
async-sema3.1.1noneleerobinson7,117,629—
@vercel/tracing-js0.5.1nonestyfle111DEPRECATED
@vercel/git-hooks1.0.0noneleerobinson9,685—
@vercel/cgi1.0.7nonezeit-bot1—
@vercel/docs-generator0.2.0nonequietshu2—
@vercel/integration-utils0.6.5-canary.0nonetootallnate13—
vercel-client1.0.0noneleo3—
vc0.1.4nonelepture254—

npm.report · No affiliation or endorsement by npm, Inc.

Made by Philippe Serhal