greenflagged

A private npm registry that scans every package before it reaches your codebase.

Top 100 npm packages by weekly downloads

21% ship provenance.

# Package Latest Weekly downloads Provenance
1 semver
The semantic version parser used by npm.
7.8.4 702,313,563 Signed with SLSA provenance attestation
2 debug
Lightweight debugging utility for Node.js and the browser
4.4.3 632,683,838 No SLSA provenance attestation
3 ansi-styles
ANSI escape codes for styling strings in the terminal
6.2.3 625,673,392 No SLSA provenance attestation
4 minimatch
a glob matcher in javascript
10.2.5 625,318,305 No SLSA provenance attestation
5 brace-expansion
Brace expansion as known from sh/bash
5.0.6 538,044,512 No SLSA provenance attestation
6 strip-ansi
Strip ANSI escape codes from a string
7.2.0 526,093,612 No SLSA provenance attestation
7 ansi-regex
Regular expression for matching ANSI escape codes
6.2.2 491,896,322 No SLSA provenance attestation
8 ms
Tiny millisecond conversion utility
2.1.3 490,318,747 No SLSA provenance attestation
9 lru-cache
A cache object that deletes the least-recently-used items.
11.5.1 471,235,423 No SLSA provenance attestation
10 string-width
Get the visual width of a string - the number of columns required to display it
8.2.1 470,216,089 No SLSA provenance attestation
11 supports-color
Detect whether a terminal supports color
10.2.2 435,377,348 No SLSA provenance attestation
12 chalk
Terminal string styling done right
5.6.2 432,482,146 No SLSA provenance attestation
13 commander
the complete solution for node.js command-line programs
15.0.0 415,603,242 No SLSA provenance attestation
14 emoji-regex
A regular expression to match all Emoji-only symbols as per the Unicode Standard.
10.6.0 412,809,477 Signed with SLSA provenance attestation
15 wrap-ansi
Wordwrap a string with ANSI escape codes
10.0.0 402,556,618 No SLSA provenance attestation
16 picomatch
Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.
4.0.4 378,201,341 No SLSA provenance attestation
17 tslib
Runtime library for TypeScript helper functions
2.8.1 375,586,488 No SLSA provenance attestation
18 glob
the most correct and second fastest glob implementation in JavaScript
13.0.6 366,238,695 No SLSA provenance attestation
19 minipass
minimal implementation of a PassThrough stream
7.1.3 366,157,930 No SLSA provenance attestation
20 @types/node
TypeScript definitions for node
25.9.3 331,479,016 No SLSA provenance attestation
21 balanced-match
Match balanced character pairs, like "{" and "}"
4.0.4 322,793,423 No SLSA provenance attestation
22 color-name
A list of color names and its values
2.1.0 319,069,377 No SLSA provenance attestation
23 source-map
Generates and consumes source maps
0.7.6 314,719,616 No SLSA provenance attestation
24 eslint-visitor-keys
Constants and utilities about visitor keys to traverse AST.
5.0.1 314,600,204 Signed with SLSA provenance attestation
25 ajv
Another JSON Schema Validator
8.20.0 306,218,746 No SLSA provenance attestation
26 type-fest
A collection of essential TypeScript types
5.7.0 304,838,391 No SLSA provenance attestation
27 react-is
Brand checking of React Elements.
19.2.7 304,837,385 Signed with SLSA provenance attestation
28 readable-stream
Node.js Streams, a user-land copy of the stream library from Node.js
4.7.0 303,109,386 No SLSA provenance attestation
29 which
Like which(1) unix command. Find the first instance of an executable in the PATH.
7.0.0 301,245,977 Signed with SLSA provenance attestation
30 color-convert
Plain color conversion functions
3.1.3 300,045,568 No SLSA provenance attestation
31 escape-string-regexp
Escape RegExp special characters
5.0.0 281,634,483 No SLSA provenance attestation
32 glob-parent
Extract the non-magic parent path from a glob string.
6.0.2 281,109,055 No SLSA provenance attestation
33 yallist
Yet Another Linked List
5.0.0 279,167,734 No SLSA provenance attestation
34 find-up
Find a file or directory by walking up parent directories
8.0.0 273,708,025 No SLSA provenance attestation
35 uuid
RFC9562 UUIDs
14.0.0 266,113,358 Signed with SLSA provenance attestation
36 safe-buffer
Safer Node.js Buffer API
5.2.1 260,334,209 No SLSA provenance attestation
37 has-flag
Check if argv has a specific flag
5.0.1 258,542,238 No SLSA provenance attestation
38 p-limit
Run multiple promise-returning & async functions with limited concurrency
7.3.0 257,921,406 No SLSA provenance attestation
39 json-schema-traverse
Traverse JSON Schema passing each schema object to callback
1.0.0 256,637,464 No SLSA provenance attestation
40 signal-exit
when you want to fire an event no matter how a process exits.
4.1.0 254,164,375 No SLSA provenance attestation
41 isexe
Minimal module to check if a file is executable.
4.0.0 253,458,470 No SLSA provenance attestation
42 locate-path
Get the first path that exists on disk of multiple paths
8.0.0 250,634,597 No SLSA provenance attestation
43 is-fullwidth-code-point
Check if the character represented by a given Unicode code point is fullwidth
5.1.0 250,426,772 No SLSA provenance attestation
44 iconv-lite
Convert character encodings in pure javascript.
0.7.2 250,009,187 No SLSA provenance attestation
45 p-locate
Get the first fulfilled promise that satisfies the provided testing function
7.0.0 249,762,353 No SLSA provenance attestation
46 undici-types
A stand-alone types package for Undici
8.4.1 248,881,036 Signed with SLSA provenance attestation
47 entities
Encode & decode XML and HTML entities with ease & speed
8.0.0 248,802,466 Signed with SLSA provenance attestation
48 path-key
Get the PATH environment variable key cross-platform
4.0.0 236,119,653 No SLSA provenance attestation
49 ignore
Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.
7.0.5 234,568,439 No SLSA provenance attestation
50 esbuild
An extremely fast JavaScript and CSS bundler and minifier.
0.28.1 233,992,178 Signed with SLSA provenance attestation
51 js-yaml
YAML 1.2 parser and serializer
4.2.0 233,178,523 No SLSA provenance attestation
52 globals
Global identifiers from different JavaScript environments
17.6.0 230,234,407 No SLSA provenance attestation
53 postcss
Tool for transforming styles with JS plugins
8.5.15 225,473,101 No SLSA provenance attestation
54 ws
Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js
8.21.0 221,887,801 No SLSA provenance attestation
55 agent-base
Turn a function into an `http.Agent` instance
9.0.0 221,764,622 Signed with SLSA provenance attestation
56 string_decoder
The string_decoder module from Node core
1.3.0 221,059,112 No SLSA provenance attestation
57 resolve
resolve like require.resolve() on behalf of files asynchronously and synchronously
1.22.12 220,699,617 No SLSA provenance attestation
58 isarray
Array#isArray for older browsers
2.0.5 220,676,184 No SLSA provenance attestation
59 argparse
CLI arguments parser. Native port of python's argparse.
2.0.1 219,711,413 No SLSA provenance attestation
60 @esbuild/linux-x64
The Linux 64-bit binary for esbuild, a JavaScript bundler.
0.28.0 217,440,900 Signed with SLSA provenance attestation
61 mime-db
Media Type Database
1.54.0 207,316,090 No SLSA provenance attestation
62 cross-spawn
Cross platform child_process#spawn and child_process#spawnSync
7.0.6 206,378,005 No SLSA provenance attestation
63 resolve-from
Resolve the path of a module like `require.resolve()` but from a given path
5.0.0 204,714,642 No SLSA provenance attestation
64 mime-types
The ultimate javascript content-type utility.
3.0.2 203,511,891 No SLSA provenance attestation
65 yargs-parser
the mighty option parser used by yargs
22.0.0 202,869,019 No SLSA provenance attestation
66 https-proxy-agent
An HTTP(s) proxy `http.Agent` implementation for HTTPS
9.1.0 201,903,976 Signed with SLSA provenance attestation
67 acorn
ECMAScript parser
8.17.0 200,309,888 No SLSA provenance attestation
68 @jridgewell/trace-mapping
Trace the original position through a source map
0.3.31 199,539,688 No SLSA provenance attestation
69 shebang-regex
Regular expression for matching a shebang line
4.0.0 199,267,543 No SLSA provenance attestation
70 shebang-command
Get the command from a shebang
2.0.0 199,233,595 No SLSA provenance attestation
71 @babel/code-frame
Generate errors that contain a code frame that point to source locations.
7.29.7 199,126,959 Signed with SLSA provenance attestation
72 yargs
yargs the modern, pirate-themed, successor to optimist.
18.0.0 197,991,278 No SLSA provenance attestation
73 typescript
TypeScript is a language for application scale JavaScript development
6.0.3 195,448,712 No SLSA provenance attestation
74 estraverse
ECMAScript JS AST traversal functions
5.3.0 195,235,683 No SLSA provenance attestation
75 hasown
A robust, ES3 compatible, "has own property" predicate.
2.0.4 191,174,125 No SLSA provenance attestation
76 pretty-format
Stringify any JavaScript value.
30.4.1 189,499,101 No SLSA provenance attestation
77 cliui
easily create complex multi-column command-line-interfaces
9.0.1 188,561,615 No SLSA provenance attestation
78 js-tokens
Tiny JavaScript tokenizer.
10.0.0 188,397,412 No SLSA provenance attestation
79 fs-extra
fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.
11.3.5 188,173,808 No SLSA provenance attestation
80 nanoid
A tiny (118 bytes), secure URL-friendly unique string ID generator
5.1.11 186,670,375 No SLSA provenance attestation
81 picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
1.1.1 184,938,668 No SLSA provenance attestation
82 json5
JSON for Humans
2.2.3 184,801,503 No SLSA provenance attestation
83 @babel/parser
A JavaScript parser
7.29.7 181,410,287 Signed with SLSA provenance attestation
84 @babel/types
Babel Types is a Lodash-esque utility library for AST nodes
7.29.7 180,983,670 Signed with SLSA provenance attestation
85 path-exists
Check if a path exists
5.0.0 180,810,153 No SLSA provenance attestation
86 zod
TypeScript-first schema declaration and validation library with static type inference
4.4.3 179,575,332 Signed with SLSA provenance attestation
87 chokidar
Minimal and efficient cross-platform file watching library
5.0.0 177,993,961 Signed with SLSA provenance attestation
88 webidl-conversions
Implements the WebIDL algorithms for converting to and from JavaScript values
8.0.1 177,666,165 Signed with SLSA provenance attestation
89 path-to-regexp
Express style path to RegExp utility
8.4.2 177,568,980 No SLSA provenance attestation
90 eslint-scope
ECMAScript scope analyzer for ESLint
9.1.2 177,142,586 Signed with SLSA provenance attestation
91 @types/estree
TypeScript definitions for estree
1.0.9 176,774,901 No SLSA provenance attestation
92 graceful-fs
A drop-in replacement for fs, making various improvements.
4.2.11 175,713,451 No SLSA provenance attestation
93 whatwg-url
An implementation of the WHATWG URL Standard's URL API and parsing machinery
16.0.1 174,820,840 Signed with SLSA provenance attestation
94 convert-source-map
Converts a source-map from/to different formats and allows adding/changing properties.
2.0.0 173,968,794 No SLSA provenance attestation
95 inherits
Browser-friendly inheritance fully compatible with standard node.js inherits()
2.0.4 173,533,800 No SLSA provenance attestation
96 get-stream
Get a stream as a string, Buffer, ArrayBuffer or array
9.0.1 173,438,365 No SLSA provenance attestation
97 function-bind
Implementation of Function.prototype.bind
1.1.2 173,407,420 No SLSA provenance attestation
98 @babel/helper-validator-identifier
Validate identifier/keywords name
7.29.7 173,122,451 Signed with SLSA provenance attestation
99 punycode
A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.
2.3.1 172,115,413 No SLSA provenance attestation
100 tr46
An implementation of the Unicode UTS #46: Unicode IDNA Compatibility Processing
6.0.0 171,318,181 No SLSA provenance attestation