npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of vercel, generated . This is a read-only snapshot.
Run your own audit →

Audit of vercel

Re-run this audit
Tracking daily next

Progress over time

Strong trust
20.2% (39) staged or trusted
Any trust
21.2% (41) incl. provenance
No trust signal
78.8% (152) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/249/39/169/2910/710/19
  1. 41/193 any trust
  2. ... [viewing]
    41/192 any trust
    1. [viewing]
  3. ...
    41/191 any trust
  4. 41/188 any trust
  5. ...
    40/187 any trust
  6. 40/187 any trust
  7. 40/187 any trust
  8. 40/187 any trust
  9. 40/187 any trust
  10. ...
    40/187 any trust
  11. ...
    40/186 any trust
  12. 40/186 any trust
  13. 40/186 any trust
  14. ...
    37/186 any trust
  15. 37/179 any trust
  16. 37/179 any trust
  17. ...
    37/179 any trust
  18. 37/179 any trust
  19. 37/179 any trust
  20. 37/179 any trust
  21. ...
    37/179 any trust
  22. ...
    37/179 any trust
  23. 38/178 any trust
  24. 38/178 any trust
  25. 38/178 any trust
  26. 38/178 any trust
  27. ...
    38/178 any trust
  28. ...
    38/178 any trust
  29. ...
    38/178 any trust
  30. ...
    38/178 any trust
  31. ...
    38/178 any trust
  32. 37/178 any trust
  33. ...
    37/178 any trust
  34. 37/177 any trust
  35. ...
    37/177 any trust
  36. 37/176 any trust
  37. 37/176 any trust
  38. 37/176 any trust
  39. 37/176 any trust
  40. 36/176 any trust
In scope
192
Staged publish
0
Trusted publisher
39
Provenance only
2
No trust signal
151
Deprecated latest
11
192 packages · click a column to sort
Package trust level report
@vercel/sdk1.28.47trusted publisherGitHub Actions289,016—
@vercel/ci0.0.0nonevercel-release-bot?—
satori0.63.0trusted publisherGitHub Actions2,842,555—
@vercel/factory0.0.59noneGitHub Actions853—
sandbox4.9.0trusted publisherGitHub Actions2,158,471—
streamdown2.7.1trusted publisherGitHub Actions4,353,596—
@vercel/vc-native64.5.0noneGitHub Actions1,696—
vercel64.5.0noneGitHub Actions2,647,307—
@vercel/container19.1.3noneGitHub Actions1,905,855—
@vercel/nestjs19.0.3noneGitHub Actions2,417,942—
@vercel/go22.0.3noneGitHub Actions2,597,123—
@vercel/hono19.0.3noneGitHub Actions2,486,971—
@vercel/h319.0.3noneGitHub Actions2,441,394—
@vercel/fastify19.0.3noneGitHub Actions2,421,606—
@vercel/static-build21.0.3noneGitHub Actions2,591,540—
@vercel/elysia19.0.3noneGitHub Actions2,420,983—
@vercel/koa19.0.3noneGitHub Actions2,344,344—
@vercel/rust20.0.3noneGitHub Actions2,418,245—
@vercel/node24.0.3noneGitHub Actions3,098,567—
@vercel/express19.0.3noneGitHub Actions2,477,157—
@vercel/fs-detectors7.9.10noneGitHub Actions240,582—
@vercel/ruby21.0.3noneGitHub Actions2,593,599—
@vercel/remix-builder24.0.3noneGitHub Actions2,582,257—
@vercel/python25.1.3noneGitHub Actions2,598,922—
@vercel/next23.0.3noneGitHub Actions2,648,185—
@vercel/cervel0.1.83noneGitHub Actions2,439,505—
@vercel/build-utils14.21.3noneGitHub Actions3,340,404—
@vercel/hydrogen20.0.3noneGitHub Actions2,581,506—
@vercel/gatsby-plugin-vercel-builder2.2.75noneGitHub Actions2,585,731—
@vercel/redwood21.0.3noneGitHub Actions2,586,085—
@vercel/client18.8.7noneGitHub Actions50,960—
@vercel/backends19.0.3noneGitHub Actions2,427,278—
@vercel/vc-native-darwin-arm6464.5.0noneGitHub Actions156,888—
@vercel/vc-native-linux-arm64-musl64.5.0noneGitHub Actions7,402—
@vercel/vc-native-darwin-x6464.5.0noneGitHub Actions42,601—
@vercel/vc-native-win32-arm6464.5.0noneGitHub Actions31,418—
@vercel/vc-native-win32-x6464.5.0noneGitHub Actions144,507—
@vercel/vc-native-linux-x64-musl64.5.0noneGitHub Actions12,439—
@vercel/vc-native-linux-x6464.5.0noneGitHub Actions1,437,900—
@vercel/vc-native-linux-arm6464.5.0noneGitHub Actions83,818—
ai7.0.143trusted publisherGitHub Actions18,352,661—
@vercel/slack-bolt1.7.3trusted publisherGitHub Actions31,953—
@vercel/oidc-verify0.0.0nonevercel-release-bot189—
@vercel/agent-runs0.0.1trusted publisherGitHub Actions359—
@vercel/geistdocs2.11.0noneGitHub Actions22,610—
@vercel/prepare-flags-definitions0.6.1trusted publisherGitHub Actions2,334,148—
libfx0.0.14trusted publisherGitHub Actions2,707—
next16.4.2trusted publisherGitHub Actions41,069,423—
@vercel/devlow-bench16.4.2trusted publisherGitHub Actions1,170—
@vercel/connect2.5.2noneGitHub Actions381,889—
@vercel/python-analysis0.15.0noneGitHub Actions2,599,280—
ai-elements1.9.1trusted publisherGitHub Actions59,839—
@vercel/blob2.8.2trusted publisherGitHub Actions5,110,953—
workflow5.2.2trusted publisherGitHub Actions1,061,786—
@vercel/functions3.10.1noneGitHub Actions5,814,300—
@vercel/aws0.2.20noneGitHub Actions29—
@vercel/oidc-aws-credentials-provider3.3.13noneGitHub Actions345,515—
@vercel/kms0.3.4noneGitHub Actions1,235—
@vercel/oidc4.0.1noneGitHub Actions25,805,432—
@vercel/sandbox-mock3.8.0trusted publisherGitHub Actions5,205—
@vercel/sandbox3.8.0trusted publisherGitHub Actions3,377,424—
agent-browser0.39.1trusted publisherGitHub Actions983,589—
@vercel/detect-agent1.2.7noneGitHub Actions3,226,351—
@vercel/microfrontends2.4.1trusted publisherGitHub Actions754,153—
run2.1.8trusted publisherGitHub Actions372,423—
v03.0.10trusted publisherGitHub Actions16,233—
create-v0-sdk-app3.0.10trusted publisherGitHub Actions131—
@vercel/flags-core1.10.0trusted publisherGitHub Actions495,730—
@vercel/agent-eval-playground0.1.4trusted publisherGitHub Actions4,913—
@vercel/agent-eval2.5.0trusted publisherGitHub Actions35,391—
@vercel/config0.12.0noneGitHub Actions253,789—
@vercel/error0.6.0trusted publisherGitHub Actions5,745—
mcp-handler2.3.0trusted publisherGitHub Actions785,706—
@vercel/queue0.8.0noneGitHub Actions1,395,447—
@vercel/firewall1.2.6noneGitHub Actions174,173—
@vercel/passport1.2.0noneGitHub Actions18,380—
@vercel/cli-auth0.3.10noneGitHub Actions2,736,655—
@vercel/cli-config0.3.1noneGitHub Actions8,055,486—
@vercel/cli-support0.0.0nonevercel-release-bot17—
@vercel/frameworks3.35.0noneGitHub Actions669,071—
@vercel/react-router1.3.7noneGitHub Actions83,640—
@vercel/static-config3.4.4noneGitHub Actions3,007,611—
@vercel/fun1.3.6trusted publisherGitHub Actions2,481,906—
@vercel/remix-run-dev2.16.7-patch.1trusted publisherGitHub Actions4,091—
@vercel/remix2.16.7-patch.1trusted publisherGitHub Actions20,320—
@vercel/nft-oxc-win32-x640.0.0nonevercel-release-bot14—
@vercel/nft-oxc-linux-x640.0.0nonevercel-release-bot9—
@vercel/nft-oxc-linux-arm640.0.0nonevercel-release-bot15—
@vercel/nft-oxc-darwin-x640.0.0nonevercel-release-bot18—
@vercel/nft-oxc0.0.0nonevercel-release-bot17—
@vercel/nft-oxc-darwin-arm640.0.0nonevercel-release-bot16—
@vercel/nft-oxc-win32-arm640.0.0nonevercel-release-bot8—
@vercel/og1.0.3noneGitHub Actions1,358,247—
@vercel/routing-utils6.6.0noneGitHub Actions898,713—
flags4.3.1trusted publisherGitHub Actions832,164—
@vercel/agent-readability0.7.0noneGitHub Actions35,877—
@vercel/schedules0.0.0nonevercel-release-bot28,165—
@vercel/webpack-asset-relocator-loader1.11.0trusted publisherGitHub Actions147,069—
@vercel/nft1.11.0trusted publisherGitHub Actions6,227,238—
remote-components0.4.15noneGitHub Actions5,763—
@vercel/ncc0.45.0trusted publisherGitHub Actions628,321—
@vercel/edge1.3.3noneGitHub Actions465,144—
@vercel/edge-config1.5.1trusted publisherGitHub Actions566,563DEPRECATED
@vercel/global-config1.5.1trusted publisherGitHub Actions108,844—
@vercel/global-config-fs0.1.0noneandybitz208,582—
@vercel/related-projects1.1.1noneGitHub Actions37,462—
@vercel/gatsby-plugin-vercel-analytics1.0.12noneGitHub Actions2,376,203—
@vercel/error-utils2.2.1noneGitHub Actions3,386,226—
@vercel/cli-exec1.0.1noneGitHub Actions6,376,693—
v0-sdk0.16.7trusted publisherGitHub Actions34,616—
@vercel/toolbar0.2.7noneGitHub Actions319,437—
@vercel/otel2.1.3trusted publisherGitHub Actions1,700,954—
experimental-ash0.64.1noneGitHub Actions5,965—
create-experimental-ash-agent0.7.0noneGitHub Actions33—
next-forge6.0.3trusted publisherGitHub Actions38—
@vercel/vclaw0.3.10trusted publisherGitHub Actions3—
mixpart0.0.6noneGitHub Actions2,182,236—
@vercel/connex0.0.11noneGitHub Actions13—
@vercel/next-browser0.7.1nonejudegao21,722—
@vercel/ai-sdk-openai-websocket-fetch1.0.0nonevercel-release-bot11,435—
@vercel/stega1.1.0nonevercel-release-bot1,403,784—
@vercel/analytics2.0.1nonevercel-release-bot5,088,223—
@vercel/speed-insights2.0.0nonevercel-release-bot3,249,340—
@vercel/cosmosdb-server1.0.1nonevercel-release-bot213,690—
botid1.5.11nonevercel-release-bot735,870—
@vercel/nextdocfs0.5.1nonejudegao6—
@vercel/kv20.0.19nonecramforce82—
@vercel/dream0.4.0noneGitHub Actions4—
@vercel/beautiful-mermaid0.1.5nonejohnphamous2,927—
@vercel/mcp-adapter0.3.2provenancevercel-release-bot21,911—
@vercel/create-dream0.2.2noneadriancooney_vercel2—
@vercel/dream-init0.2.2noneadriancooney_vercel3—
@vercel/introspection0.0.13provenancevercel-release-bot92,174—
@vercel/v00.0.1-alpha.1nonefernandorojo4—
@vercel/before-and-after0.0.4nonejamesvclements214DEPRECATED
@vercel/sandbox-cli1.1.1nonevercel-release-bot141DEPRECATED
@vercel/examples-ui2.0.4nonevercel-release-bot434—
react-chatgpt-hooks0.0.1nonequuu3—
@vercel/platforms1.0.0nonehaydenbleasel41—
@vercel/ade0.0.24nonerobpruzan21—
mcp-to-ai-sdk0.1.1nonevercel-release-bot38—
@vercel/repository-dispatch-status0.0.1nonevercel-release-bot2—
@vercel/repository-dispatch-checkout0.0.1nonevercel-release-bot3—
@vercel/ai-sdk-gateway0.1.10nonevercel-release-bot73DEPRECATED
@vercel/repository-dispatch0.1.0nonevercel-release-bot68—
@vercel/flags3.1.1nonevercel-release-bot37,539DEPRECATED
@vercel/sqs-consumer5.7.0nonemglagola29—
@vercel/kv3.0.0nonevercel-release-bot229,786DEPRECATED
@vercel/postgres-kysely0.10.0nonevercel-release-bot1,836DEPRECATED
@vercel/postgres0.10.0nonevercel-release-bot224,798DEPRECATED
@vercel/style-guide6.0.0nonevercel-release-bot139,527—
@vercel/remote-nx2.0.0nonevercel-release-bot8,568—
@vercel/fetch7.0.0nonevercel-release-bot476,903—
@vercel/visual-editing0.0.1nonevercel-release-bot3—
@vercel/ai-utils0.0.2nonejaredpalmer30—
@vercel/edge-config-fs0.1.0nonevercel-release-bot342,540DEPRECATED
@vercel/remix-entry-server0.1.1nonevercel-release-bot68—
@vercel/node-bridge4.0.1nonevercel-release-bot20,919—
@vercel/algolite0.3.0-canary.1noneofhouse4—
@vercel/experimental-nft-next-plugin0.0.1nonevercel-release-bot3—
@vercel/fetch-cached-dns2.1.2nonevercel-release-bot299,430—
@vercel/remote-rush1.0.1nonevercel-release-bot27,240—
@vercel/remote1.0.1nonevercel-release-bot30,915—
@vercel/webpack-nft0.0.14nonevercel-release-bot4—
@vercel/nft-next-plugin0.0.13nonevercel-release-bot1—
@vercel/experimental-nft0.0.4nonevercel-release-bot4—
@vercel/experimental-nft-win32-x640.0.4nonevercel-release-bot1—
@vercel/experimental-nft-darwin-arm640.0.4nonevercel-release-bot1—
@vercel/experimental-nft-darwin-x640.0.4nonevercel-release-bot2—
@vercel/experimental-nft-linux-x640.0.4nonevercel-release-bot1—
@vercel/wireguard0.0.7noneemeraldsanto9—
@vercel/examples-ui-svelte0.1.16nonegbibeaulaviolette3—
@vercel/satori-node0.0.22nonestyfle5—
@vercel/satori-core0.0.22nonestyfle8—
@vercel/edge-jest-environment0.12.4nonekikobeats2—
@vercel/edge-runtime0.12.4nonekikobeats5DEPRECATED
@vercel/edge-vm0.12.4nonekikobeats8—
@vercel/edge-types0.12.4nonekikobeats5—
@vercel/edge-primitives0.12.4nonekikobeats12—
@vercel/edge-format0.12.2nonekikobeats9—
@vercel/format0.11.0nonekikobeats3—
@vercel/fetch-retry5.1.3noneethan_arrowood323,404—
@vercel/mdx-deck-theme0.3.1nonedav-is2—
@vercel/edge-functions-ui0.2.1nonelfades823—
async-sema3.1.1noneleerobinson6,659,721—
@vercel/tracing-js0.5.1nonestyfle19DEPRECATED
@vercel/git-hooks1.0.0noneleerobinson7,226—
@vercel/cgi1.0.7nonezeit-bot4—
@vercel/docs-generator0.2.0nonequietshu7—
@vercel/integration-utils0.6.5-canary.0nonetootallnate19—
vercel-client1.0.0noneleo2—
vc0.1.4nonelepture290—