Package Security & Trust

Trust scores for npm, PyPI, and other packages. Updated 2026-07-22.

#PackageTrustGradeStarsDownloadsLanguage
1chalk45D+-1,713,138,879-
2ansi-regex45D-1,460,638,496-
3commander47D+-1,186,147,128-
4has-flag46D+-1,046,803,862-
5argparse47D+-628,939,615-
6yargs47D+-601,399,964-
7postcss41D-576,785,121-
8cliui47D+-566,663,666-
9npm-run-path47D+-496,302,466-
10jsesc49D+-431,357,871-
11mime43D-393,287,010-
12@babel/compat-data51C--367,503,960-
13axios42D-360,150,618-
14arg44D-359,437,529-
15ansi-escapes46D+-357,213,738-
16@babel/helper-plugin-utils50D+-332,842,740-
17jackspeak46D+-330,092,160-
18@babel/helper-validator-option50D+-328,226,658-
19optionator46D+-326,969,539-
20restore-cursor46D+-319,421,625-
21esutils46D+-315,869,746-
22@eslint/js46D+-311,901,881-
23cli-cursor46D+-310,196,953-
24@typescript-eslint/eslint-plugin46D+-303,816,533-
25slice-ansi45D+-302,396,343-
26follow-redirects40D-301,998,452-
27rxjs44D-301,513,006-
28@eslint-community/eslint-utils50D+-280,280,887-
29binary-extensions46D+-268,745,130-
30tapable46D+-267,739,482-
31log-symbols47D+-266,388,394-
32is-binary-path46D+-263,860,790-
33@isaacs/cliui47D+-249,795,761-
34ora44D-223,050,550-
35fast-uri46D+-222,304,200-
36figures47D+-217,504,244-
37terser46D+-204,559,171-
38@aws-sdk/client-sso51C--197,946,681-
39cli-width47D+-197,160,188-
40cssesc49D+-194,802,488-
41eslint-plugin-react-hooks46D+-193,708,939-
42cli-boxes46D+-186,763,633-
43boxen46D+-186,299,531-
44dir-glob46D+-185,430,600-
45cli-spinners46D+-183,089,937-
46@eslint/plugin-kit45D-181,962,810-
47@smithy/smithy-client51C--179,526,186-
48@babel/plugin-syntax-import-attributes51C--178,207,223-
49ansi-align46D+-172,755,228-
50babel-jest50D+-172,343,897-
51babel-preset-jest49D+-169,453,367-
52@babel/plugin-transform-modules-commonjs50D+-166,997,197-
53eslint-plugin-import44D-163,023,244-
54import-local47D+-162,470,088-
55@floating-ui/dom46D+-161,398,021-
56eslint-module-utils47D+-159,298,151-
57@floating-ui/core47D+-158,393,106-
58autoprefixer47D+-156,004,223-
59make-error46D+-155,029,336-
60jest-cli46D+-151,712,818-
61cli-truncate47D+-146,370,445-
62@babel/plugin-transform-spread50D+-144,955,366-
63@babel/helper-define-polyfill-provider50D+-144,920,938-
64uglify-js46D+-143,172,773-
65clip-features61C-140,361,835-
66@babel/plugin-syntax-import-meta50D+-139,616,958-
67@rollup/pluginutils47D+-139,106,885-
68babel-plugin-polyfill-regenerator51C--138,882,205-
69@babel/plugin-transform-for-of50D+-136,534,880-
70@babel/plugin-transform-literals51C--135,928,470-
71google-auth-library47D+-132,605,124-
72babel-plugin-polyfill-corejs247D+-132,439,504-
73clipboardy46D+-132,099,863-
74@babel/plugin-transform-named-capturing-groups-regex49D+-130,766,485-
75@babel/plugin-transform-object-super50D+-130,228,220-
76meow42D-129,435,518-
77@babel/plugin-transform-property-literals51C--129,384,140-
78@babel/plugin-syntax-class-static-block50D+-127,487,070-
79listr249D+-126,721,963-
80@graphql-tools/utils47D+-126,467,044-
81log-update49D+-125,670,584-
82@babel/plugin-transform-optional-chaining51C--121,968,557-
83regenerate49D+-120,456,681-
84@babel/plugin-transform-object-rest-spread50D+-118,448,799-
85progress46D+-117,848,910-
86@npmcli/fs46D+-117,781,030-
87next36D--117,301,202-
88@adobe/css-tools51C--116,607,498-
89eslint-import-resolver-typescript47D+-116,242,327-
90@babel/plugin-transform-logical-assignment-operators49D+-114,146,225-
91@babel/plugin-transform-private-property-in-object51C--113,826,864-
92@inquirer/type46D+-109,813,276-
93supports-hyperlinks45D+-109,451,399-
94styled-jsx46D+-108,107,182-
95@babel/plugin-transform-unicode-property-regex51C--106,809,573-
96client-only47D+-105,840,961-
97postcss-import46D+-104,813,638-
98tsx59D-103,083,913-
99node-gyp-build47D+-102,370,764-
100consola46D+-101,989,685-
We use cookies for analytics and caching. Privacy Policy