Is Photon Safe?

Photon — Nerq Trust Score 33.8/100 (F grade). Based on analysis of 2 trust dimensions, it is has significant safety risks. Last updated: 2026-03-31.

Exercise caution with Photon. Photon is a Node.js package with a Nerq Trust Score of 33.8/100 (F), based on 3 independent data dimensions. It is below the recommended threshold of 70. Security: 65/100. Popularity: 24/100. Data sourced from npm registry, GitHub repository, NVD, OSV.dev, and OpenSSF Scorecard. Last updated: 2026-03-31. Machine-readable data (JSON).

Is Photon safe?

NO — USE WITH CAUTION — Photon has a Nerq Trust Score of 33.8/100 (F). It has below-average trust signals with significant gaps in security, maintenance, or documentation. Not recommended for production use without thorough manual review and additional security measures.

Security Analysis → {name} Privacy Report →

What is Photon's trust score?

Photon has a Nerq Trust Score of 33.8/100, earning a F grade. This score is based on 2 independently measured dimensions including security, maintenance, and community adoption.

Security
65
Popularity
24

What are the key security findings for Photon?

Photon's strongest signal is security at 65/100. No known vulnerabilities have been detected. It has not yet reached the Nerq Verified threshold of 70+.

Security score: 65/100 (moderate)
Popularity: 24/100 — community adoption

What is Photon and who maintains it?

Authorcarllee1983
Categorynpm
SourceN/A

Photon Across Platforms

Same developer/company in other registries:

carllee1983/tappay-payment-backend
32/100 · packagist
carllee1983/newebpay-logistics
32/100 · packagist
carllee1983/ecpay-core
31/100 · packagist
carllee1983/newebpay
31/100 · packagist
carllee1983/ecpay-einvoice-b2b
30/100 · packagist

Similar Npm by Trust Score

@agencycoda/mia-form (44)claude-plugin-wordpress-manager (44)gt-remark (44)@dashnex/cli (44)edvoyui-component-library-test-flight (44)
See all safest Npm →

Safety Guide: Photon

What is Photon?

Photon is a Node.js package — Gravito Photon HTTP engine (compat wrapper).

How to Verify Safety

Run npm audit to check for vulnerabilities. Review the package's GitHub repository for recent commits.

You can also check the trust score via API: GET /v1/preflight?target=@gravito/photon

Key Safety Concerns for Node.js packages

When evaluating any Node.js package, watch for: dependency vulnerabilities, malicious packages, typosquatting.

Trust Assessment

Photon has a Nerq Trust Score of 34/100 (F) and has not yet reached Nerq trust threshold (70+). This score is based on automated analysis of security, maintenance, community, and quality signals.

Key Takeaways

Frequently Asked Questions

Is Photon safe to use?
Exercise caution. @gravito/photon has a Nerq Trust Score of 33.8/100 (F). Strongest signal: security (65/100). Score based on security (65/100), popularity (24/100).
What is Photon's trust score?
@gravito/photon: 33.8/100 (F). Score based on: security (65/100), popularity (24/100). Scores update as new data becomes available. API: GET nerq.ai/v1/preflight?target=@gravito/photon
What are safer alternatives to Photon?
In the npm category, more Node.js packages are being analyzed — check back soon. @gravito/photon scores 33.8/100.
Does Photon have known vulnerabilities?
Nerq checks Photon against NVD, OSV.dev, and registry-specific vulnerability databases. Current security score: 65/100. Run your package manager's audit command for the latest findings.
How actively maintained is Photon?
Photon has a trust score of 33.8/100 (F). Below Nerq Verified threshold — conduct additional review.
API: /v1/preflight Trust Badge API Docs

Disclaimer: Nerq trust scores are automated assessments based on publicly available signals. They are not endorsements or guarantees. Always conduct your own due diligence.

We use cookies for analytics and caching. Privacy Policy