Is Npm Safe?
Npm — Nerq Trust Score 48.2/100 (D grade). Based on analysis of 2 trust dimensions, it is has notable safety concerns. Last updated: 2026-06-15.
Exercise caution with Npm. Npm is a website with a Nerq Trust Score of 48.2/100 (D), based on 3 independent data dimensions. Below the recommended threshold of 70. Security: 90/100. Popularity: 0/100. Data sourced from domain registration, SSL certificates, Tranco ranking, and web reputation databases. Last updated: 2026-04-12. Machine-readable data (JSON).
Is Npm safe?
NO — USE WITH CAUTION — Npm has a Nerq Trust Score of 48.2/100 (D). It has below-average trust signals with significant gaps in security, maintenance, or documentation. Not recommended for production use without thorough manual review and additional security measures.
What is Npm's trust score?
Npm has a Nerq Trust Score of 48.2/100, earning a D grade. This score is based on 2 independently measured dimensions including security, maintenance, and community adoption.
What are the key security findings for Npm?
Npm's strongest signal is security at 90/100. No known vulnerabilities have been detected. It has not yet reached the Nerq Verified threshold of 70+.
What is Npm and who maintains it?
| Author | Unknown |
| Category | Websites |
| Source | N/A |
Npm Across Platforms
Same developer/company in other registries:
Similar Website by Trust Score
Safety Guide: Npm
What is Npm?
Npm is a website — JavaScript package registry owned by GitHub (Microsoft). Largest software registry with 2M+ packages..
How to Verify Safety
Check domain age, SSL certificate, and security headers.
You can also check the trust score via API: GET /v1/preflight?target=npm
Key Safety Concerns for website
When evaluating any website, watch for: domain age, SSL validity, scam indicators.
Trust Assessment
Npm has a Nerq Trust Score of 48/100 (D) and has not yet reached Nerq trust threshold (70+). This score is based on automated analysis of security, maintenance, community, and quality signals.
Key Takeaways
- Npm has a Trust Score of 48/100 (D).
- Review carefully before use — below trust threshold.
- Always verify independently using the Nerq API.
Detailed Score Analysis
| Dimension | Score |
|---|---|
| Security | 90/100 |
| Maintenance | 50/100 |
| Popularity | 0/100 |
| Quality | 40/100 |
| Community | 35/100 |
Based on 5 dimensions. Data from domain registration, SSL certificates, Tranco ranking, and web reputation databases.
What data does Npm collect?
Npm: JavaScript package registry owned by GitHub (Microsoft). Largest software registry with 2M+ packages.
Privacy score: 47/100. Review the privacy policy for data collection practices, cookie usage, and third-party tracking. Check for HTTPS encryption and transparent data handling.
Full analysis: Npm Privacy Report · Privacy review
Is Npm secure?
Security score: 90/100. This meets the recommended security threshold for production use.
Nerq monitors this entity against NVD, OSV.dev, and registry-specific vulnerability databases for ongoing security assessment.
Full analysis: Npm Security Report
How we calculated this score
Npm's trust score of 48.2/100 (D) is computed from domain registration, SSL certificates, Tranco ranking, and web reputation databases. The score reflects 5 independent dimensions: security (90/100), maintenance (50/100), popularity (0/100), quality (40/100), community (35/100). Each dimension is weighted equally to produce the composite trust score.
Nerq analyzes over 7.5 million entities across 26 registries using the same methodology, enabling direct cross-entity comparison. Scores are updated continuously as new data becomes available.
This page was last reviewed on June 15, 2026. Data version: 1.0.
Full methodology documentation · Machine-readable data (JSON API)
Frequently Asked Questions
Is Npm Safe?
What is Npm's trust score?
What are safer alternatives to Npm?
Is Npm a scam?
Does Npm protect my data?
Popular in Websites
Browse Categories
See Also
Disclaimer: Nerq trust scores are automated assessments based on publicly available signals. They are not endorsements or guarantees. Always conduct your own due diligence.