npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of vercel, generated . This is a read-only snapshot.
Run your own audit →

Audit of vercel

Re-run this audit
Tracking daily next

Progress over time

Strong trust
20.2% (39) staged or trusted
Any trust
21.2% (41) incl. provenance
No trust signal
78.8% (152) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/249/39/169/2910/810/1610/22
  1. 41/193 any trust
  2. ...
    41/192 any trust
  3. ...
    41/191 any trust
  4. 41/188 any trust
  5. ... [viewing]
    40/187 any trust
    1. [viewing]
  6. 40/187 any trust
  7. 40/187 any trust
  8. 40/187 any trust
  9. 40/187 any trust
  10. ...
    40/187 any trust
  11. ...
    40/186 any trust
  12. 40/186 any trust
  13. 40/186 any trust
  14. ...
    37/186 any trust
  15. 37/179 any trust
  16. 37/179 any trust
  17. ...
    37/179 any trust
  18. 37/179 any trust
  19. 37/179 any trust
  20. 37/179 any trust
  21. ...
    37/179 any trust
  22. ...
    37/179 any trust
  23. 38/178 any trust
  24. 38/178 any trust
  25. 38/178 any trust
  26. 38/178 any trust
  27. ...
    38/178 any trust
  28. ...
    38/178 any trust
  29. ...
    38/178 any trust
  30. ...
    38/178 any trust
  31. ...
    38/178 any trust
  32. 37/178 any trust
  33. ...
    37/178 any trust
  34. 37/177 any trust
  35. ...
    37/177 any trust
  36. 37/176 any trust
  37. 37/176 any trust
  38. 37/176 any trust
  39. 37/176 any trust
  40. 36/176 any trust
In scope
187
Staged publish
0
Trusted publisher
38
Provenance only
2
No trust signal
147
Deprecated latest
11
187 packages · click a column to sort
Package trust level report
sandbox4.7.0trusted publisherGitHub Actions4,306,585—
@vercel/sandbox3.6.0trusted publisherGitHub Actions6,614,736—
@vercel/sandbox-mock3.6.0trusted publisherGitHub Actions9,613—
satori0.38.0trusted publisherGitHub Actions4,964,314—
vercel63.1.0noneGitHub Actions5,219,743—
@vercel/vc-native-win32-x6463.1.0noneGitHub Actions294,276—
@vercel/vc-native63.1.0noneGitHub Actions34,471—
@vercel/vc-native-win32-arm6463.1.0noneGitHub Actions74,449—
@vercel/vc-native-linux-x6463.1.0noneGitHub Actions2,736,206—
@vercel/vc-native-darwin-x6463.1.0noneGitHub Actions105,719—
@vercel/vc-native-darwin-arm6463.1.0noneGitHub Actions328,726—
@vercel/vc-native-linux-arm6463.1.0noneGitHub Actions173,471—
@vercel/fs-detectors7.9.5noneGitHub Actions654,032—
@vercel/static-build20.0.0noneGitHub Actions5,061,537—
@vercel/go21.0.0noneGitHub Actions5,067,314—
@vercel/hono18.0.0noneGitHub Actions4,827,674—
@vercel/rust19.0.0noneGitHub Actions4,636,863—
@vercel/python24.0.0noneGitHub Actions5,068,488—
@vercel/client18.8.1noneGitHub Actions58,480—
@vercel/remix-builder23.0.0noneGitHub Actions5,040,218—
@vercel/node23.0.0noneGitHub Actions6,030,637—
@vercel/hydrogen19.0.0noneGitHub Actions5,037,503—
@vercel/koa18.0.0noneGitHub Actions4,506,721—
@vercel/h318.0.0noneGitHub Actions4,700,153—
@vercel/fastify18.0.0noneGitHub Actions4,653,080—
@vercel/backends18.0.0noneGitHub Actions4,662,367—
@vercel/express18.0.0noneGitHub Actions4,808,391—
@vercel/nestjs18.0.0noneGitHub Actions4,639,740—
@vercel/elysia18.0.0noneGitHub Actions4,650,599—
@vercel/cervel0.1.78noneGitHub Actions4,683,195—
@vercel/gatsby-plugin-vercel-builder2.2.70noneGitHub Actions5,044,241—
@vercel/redwood20.0.0noneGitHub Actions5,048,386—
@vercel/container18.0.0noneGitHub Actions3,543,799—
@vercel/ruby20.0.0noneGitHub Actions5,059,786—
@vercel/build-utils14.20.0noneGitHub Actions6,594,717—
@vercel/next22.0.0noneGitHub Actions5,122,567—
@vercel/config0.12.0noneGitHub Actions429,017—
@vercel/factory0.0.37noneGitHub Actions1,982—
ai7.0.133trusted publisherGitHub Actions34,491,532—
@vercel/error0.6.0trusted publisherGitHub Actions13,519—
mcp-handler2.3.0trusted publisherGitHub Actions1,488,164—
@vercel/sdk1.28.41trusted publisherGitHub Actions563,795—
workflow5.1.0trusted publisherGitHub Actions1,695,437—
next16.4.0trusted publisherGitHub Actions76,902,421—
@vercel/devlow-bench16.4.0trusted publisherGitHub Actions2,870—
@vercel/connect2.4.1noneGitHub Actions738,165—
@vercel/geistdocs2.9.0noneGitHub Actions48,749—
@vercel/blob2.8.1trusted publisherGitHub Actions9,365,392—
@vercel/queue0.8.0noneGitHub Actions2,258,611—
@vercel/firewall1.2.6noneGitHub Actions295,567—
@vercel/slack-bolt1.7.2trusted publisherGitHub Actions61,104—
libfx0.0.13trusted publisherGitHub Actions3,173—
@vercel/oidc-aws-credentials-provider3.3.11noneGitHub Actions663,262—
@vercel/aws0.2.18noneGitHub Actions384—
@vercel/kms0.3.2noneGitHub Actions749—
@vercel/passport1.2.0noneGitHub Actions35,997—
@vercel/functions3.9.11noneGitHub Actions10,469,884—
@vercel/oidc4.0.0noneGitHub Actions46,188,713—
@vercel/agent-eval2.4.1trusted publisherGitHub Actions91,711—
@vercel/cli-auth0.3.10noneGitHub Actions5,008,649—
@vercel/cli-config0.3.1noneGitHub Actions13,311,904—
agent-browser0.38.2trusted publisherGitHub Actions2,069,828—
run2.1.7trusted publisherGitHub Actions212,831—
@vercel/cli-support0.0.0nonevercel-release-bot161—
streamdown2.7.0trusted publisherGitHub Actions8,122,093—
@vercel/prepare-flags-definitions0.5.0trusted publisherGitHub Actions4,596,190—
@vercel/flags-core1.9.0trusted publisherGitHub Actions1,026,682—
create-v0-sdk-app3.0.8trusted publisherGitHub Actions725—
v03.0.8trusted publisherGitHub Actions26,584—
@vercel/frameworks3.35.0noneGitHub Actions1,494,186—
@vercel/react-router1.3.7noneGitHub Actions173,232—
@vercel/static-config3.4.4noneGitHub Actions5,987,236—
@vercel/fun1.3.6trusted publisherGitHub Actions5,014,727—
@vercel/remix-run-dev2.16.7-patch.1trusted publisherGitHub Actions9,347—
@vercel/remix2.16.7-patch.1trusted publisherGitHub Actions49,542—
@vercel/nft-oxc-win32-x640.0.0nonevercel-release-bot27—
@vercel/nft-oxc-linux-x640.0.0nonevercel-release-bot26—
@vercel/nft-oxc-linux-arm640.0.0nonevercel-release-bot30—
@vercel/nft-oxc-darwin-x640.0.0nonevercel-release-bot26—
@vercel/nft-oxc0.0.0nonevercel-release-bot25—
@vercel/nft-oxc-darwin-arm640.0.0nonevercel-release-bot28—
@vercel/nft-oxc-win32-arm640.0.0nonevercel-release-bot32—
@vercel/og1.0.3noneGitHub Actions2,460,599—
@vercel/routing-utils6.6.0noneGitHub Actions1,800,041—
flags4.3.1trusted publisherGitHub Actions1,689,436—
@vercel/agent-readability0.7.0noneGitHub Actions116,700—
@vercel/schedules0.0.0nonevercel-release-bot26,408—
@vercel/python-analysis0.14.0noneGitHub Actions4,968,403—
@vercel/webpack-asset-relocator-loader1.11.0trusted publisherGitHub Actions342,832—
@vercel/nft1.11.0trusted publisherGitHub Actions12,376,789—
remote-components0.4.15noneGitHub Actions16,617—
@vercel/ncc0.45.0trusted publisherGitHub Actions1,202,632—
@vercel/edge1.3.3noneGitHub Actions912,372—
@vercel/detect-agent1.2.5noneGitHub Actions5,463,221—
@vercel/edge-config1.5.1trusted publisherGitHub Actions1,175,744DEPRECATED
@vercel/global-config1.5.1trusted publisherGitHub Actions225,256—
@vercel/global-config-fs0.1.0noneandybitz436,834—
@vercel/related-projects1.1.1noneGitHub Actions94,956—
@vercel/gatsby-plugin-vercel-analytics1.0.12noneGitHub Actions4,638,159—
@vercel/error-utils2.2.1noneGitHub Actions6,668,389—
@vercel/cli-exec1.0.1noneGitHub Actions10,483,699—
v0-sdk0.16.7trusted publisherGitHub Actions58,563—
@vercel/toolbar0.2.7noneGitHub Actions643,890—
@vercel/microfrontends2.4.0trusted publisherGitHub Actions1,567,768—
@vercel/otel2.1.3trusted publisherGitHub Actions3,492,775—
experimental-ash0.64.1noneGitHub Actions4,361—
create-experimental-ash-agent0.7.0noneGitHub Actions4—
next-forge6.0.3trusted publisherGitHub Actions46—
@vercel/vclaw0.3.10trusted publisherGitHub Actions6—
mixpart0.0.6noneGitHub Actions3,497,441—
@vercel/connex0.0.11noneGitHub Actions8—
@vercel/next-browser0.7.1nonejudegao30,829—
@vercel/ai-sdk-openai-websocket-fetch1.0.0nonevercel-release-bot18,923—
@vercel/stega1.1.0nonevercel-release-bot3,020,924—
@vercel/analytics2.0.1nonevercel-release-bot9,502,349—
ai-elements1.9.0trusted publisherGitHub Actions147,691—
@vercel/speed-insights2.0.0nonevercel-release-bot6,421,309—
@vercel/cosmosdb-server1.0.1nonevercel-release-bot508,324—
botid1.5.11nonevercel-release-bot1,348,288—
@vercel/nextdocfs0.5.1nonejudegao4—
@vercel/kv20.0.19nonecramforce161—
@vercel/dream0.4.0noneGitHub Actions6—
@vercel/beautiful-mermaid0.1.5nonejohnphamous4,804—
@vercel/mcp-adapter0.3.2provenancevercel-release-bot63,559—
@vercel/create-dream0.2.2noneadriancooney_vercel5—
@vercel/dream-init0.2.2noneadriancooney_vercel5—
@vercel/agent-eval-playground0.1.3trusted publisherGitHub Actions2,269—
@vercel/introspection0.0.13provenancevercel-release-bot186,992—
@vercel/v00.0.1-alpha.1nonefernandorojo11—
@vercel/before-and-after0.0.4nonejamesvclements1,281DEPRECATED
@vercel/sandbox-cli1.1.1nonevercel-release-bot853DEPRECATED
@vercel/examples-ui2.0.4nonevercel-release-bot1,659—
react-chatgpt-hooks0.0.1nonequuu5—
@vercel/platforms1.0.0nonehaydenbleasel82—
@vercel/ade0.0.24nonerobpruzan7—
mcp-to-ai-sdk0.1.1nonevercel-release-bot110—
@vercel/repository-dispatch-status0.0.1nonevercel-release-bot3—
@vercel/repository-dispatch-checkout0.0.1nonevercel-release-bot3—
@vercel/ai-sdk-gateway0.1.10nonevercel-release-bot1,007DEPRECATED
@vercel/repository-dispatch0.1.0nonevercel-release-bot132—
@vercel/flags3.1.1nonevercel-release-bot109,659DEPRECATED
@vercel/sqs-consumer5.7.0nonemglagola20—
@vercel/kv3.0.0nonevercel-release-bot447,121DEPRECATED
@vercel/postgres-kysely0.10.0nonevercel-release-bot5,038DEPRECATED
@vercel/postgres0.10.0nonevercel-release-bot452,568DEPRECATED
@vercel/style-guide6.0.0nonevercel-release-bot315,690—
@vercel/remote-nx2.0.0nonevercel-release-bot24,292—
@vercel/fetch7.0.0nonevercel-release-bot1,160,703—
@vercel/visual-editing0.0.1nonevercel-release-bot4—
@vercel/ai-utils0.0.2nonejaredpalmer53—
@vercel/edge-config-fs0.1.0nonevercel-release-bot829,373DEPRECATED
@vercel/remix-entry-server0.1.1nonevercel-release-bot201—
@vercel/node-bridge4.0.1nonevercel-release-bot42,229—
@vercel/algolite0.3.0-canary.1noneofhouse4—
@vercel/experimental-nft-next-plugin0.0.1nonevercel-release-bot9—
@vercel/fetch-cached-dns2.1.2nonevercel-release-bot709,895—
@vercel/remote-rush1.0.1nonevercel-release-bot86,603—
@vercel/remote1.0.1nonevercel-release-bot111,022—
@vercel/webpack-nft0.0.14nonevercel-release-bot11—
@vercel/nft-next-plugin0.0.13nonevercel-release-bot9—
@vercel/experimental-nft0.0.4nonevercel-release-bot6—
@vercel/experimental-nft-win32-x640.0.4nonevercel-release-bot6—
@vercel/experimental-nft-darwin-arm640.0.4nonevercel-release-bot7—
@vercel/experimental-nft-darwin-x640.0.4nonevercel-release-bot7—
@vercel/experimental-nft-linux-x640.0.4nonevercel-release-bot7—
@vercel/wireguard0.0.7noneemeraldsanto9—
@vercel/examples-ui-svelte0.1.16nonegbibeaulaviolette5—
@vercel/satori-node0.0.22nonestyfle5—
@vercel/satori-core0.0.22nonestyfle7—
@vercel/edge-jest-environment0.12.4nonekikobeats7—
@vercel/edge-runtime0.12.4nonekikobeats13DEPRECATED
@vercel/edge-vm0.12.4nonekikobeats9—
@vercel/edge-types0.12.4nonekikobeats10—
@vercel/edge-primitives0.12.4nonekikobeats24—
@vercel/edge-format0.12.2nonekikobeats19—
@vercel/format0.11.0nonekikobeats4—
@vercel/fetch-retry5.1.3noneethan_arrowood718,583—
@vercel/mdx-deck-theme0.3.1nonedav-is6—
@vercel/edge-functions-ui0.2.1nonelfades2,819—
async-sema3.1.1noneleerobinson13,182,758—
@vercel/tracing-js0.5.1nonestyfle20DEPRECATED
@vercel/git-hooks1.0.0noneleerobinson14,291—
@vercel/cgi1.0.7nonezeit-bot9—
@vercel/docs-generator0.2.0nonequietshu18—
@vercel/integration-utils0.6.5-canary.0nonetootallnate13—
vercel-client1.0.0noneleo4—
vc0.1.4nonelepture596—