greenflagged

A private npm registry that scans every package before it reaches your codebase.

Top 100 npm packages by weekly downloads

22% ship provenance.

# Package Latest Weekly downloads Provenance
1 semver
The semantic version parser used by npm.
7.8.2 702,313,563 Signed with SLSA provenance attestation
2 debug
Lightweight debugging utility for Node.js and the browser
4.4.3 632,683,838 No SLSA provenance attestation
3 minimatch
a glob matcher in javascript
10.2.5 620,833,191 No SLSA provenance attestation
4 strip-ansi
Strip ANSI escape codes from a string
7.2.0 526,093,612 No SLSA provenance attestation
5 brace-expansion
Brace expansion as known from sh/bash
5.0.6 510,843,890 No SLSA provenance attestation
6 ansi-styles
ANSI escape codes for styling strings in the terminal
6.2.3 499,696,175 No SLSA provenance attestation
7 ansi-regex
Regular expression for matching ANSI escape codes
6.2.2 491,896,322 No SLSA provenance attestation
8 ms
Tiny millisecond conversion utility
2.1.3 478,894,239 No SLSA provenance attestation
9 string-width
Get the visual width of a string - the number of columns required to display it
8.2.1 470,216,089 No SLSA provenance attestation
10 lru-cache
A cache object that deletes the least-recently-used items.
11.5.1 446,976,277 No SLSA provenance attestation
11 supports-color
Detect whether a terminal supports color
10.2.2 435,377,348 No SLSA provenance attestation
12 commander
the complete solution for node.js command-line programs
15.0.0 415,016,533 No SLSA provenance attestation
13 chalk
Terminal string styling done right
5.6.2 409,735,809 No SLSA provenance attestation
14 emoji-regex
A regular expression to match all Emoji-only symbols as per the Unicode Standard.
10.6.0 400,789,377 Signed with SLSA provenance attestation
15 picomatch
Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.
4.0.4 388,584,331 No SLSA provenance attestation
16 wrap-ansi
Wordwrap a string with ANSI escape codes
10.0.0 386,852,598 No SLSA provenance attestation
17 tslib
Runtime library for TypeScript helper functions
2.8.1 383,769,304 No SLSA provenance attestation
18 glob
the most correct and second fastest glob implementation in JavaScript
13.0.6 345,940,216 No SLSA provenance attestation
19 @types/node
TypeScript definitions for node
25.9.2 331,479,016 No SLSA provenance attestation
20 color-name
A list of color names and its values
2.1.0 319,069,377 No SLSA provenance attestation
21 source-map
Generates and consumes source maps
0.7.6 314,719,616 No SLSA provenance attestation
22 eslint-visitor-keys
Constants and utilities about visitor keys to traverse AST.
5.0.1 314,600,204 Signed with SLSA provenance attestation
23 minipass
minimal implementation of a PassThrough stream
7.1.3 312,747,345 No SLSA provenance attestation
24 balanced-match
Match balanced character pairs, like "{" and "}"
4.0.4 309,197,940 No SLSA provenance attestation
25 ajv
Another JSON Schema Validator
8.20.0 306,218,746 No SLSA provenance attestation
26 type-fest
A collection of essential TypeScript types
5.7.0 304,838,391 No SLSA provenance attestation
27 readable-stream
Node.js Streams, a user-land copy of the stream library from Node.js
4.7.0 303,109,386 No SLSA provenance attestation
28 color-convert
Plain color conversion functions
3.1.3 300,045,568 No SLSA provenance attestation
29 react-is
Brand checking of React Elements.
19.2.7 290,307,389 Signed with SLSA provenance attestation
30 which
Like which(1) unix command. Find the first instance of an executable in the PATH.
7.0.0 289,741,429 Signed with SLSA provenance attestation
31 has-flag
Check if argv has a specific flag
5.0.1 283,819,705 No SLSA provenance attestation
32 escape-string-regexp
Escape RegExp special characters
5.0.0 281,634,483 No SLSA provenance attestation
33 find-up
Find a file or directory by walking up parent directories
8.0.0 273,708,025 No SLSA provenance attestation
34 yallist
Yet Another Linked List
5.0.0 271,684,874 No SLSA provenance attestation
35 glob-parent
Extract the non-magic parent path from a glob string.
6.0.2 269,675,129 No SLSA provenance attestation
36 safe-buffer
Safer Node.js Buffer API
5.2.1 258,042,899 No SLSA provenance attestation
37 p-limit
Run multiple promise-returning & async functions with limited concurrency
7.3.0 257,921,406 No SLSA provenance attestation
38 signal-exit
when you want to fire an event no matter how a process exits.
4.1.0 254,164,375 No SLSA provenance attestation
39 undici-types
A stand-alone types package for Undici
8.4.0 251,921,446 Signed with SLSA provenance attestation
40 locate-path
Get the first path that exists on disk of multiple paths
8.0.0 250,634,597 No SLSA provenance attestation
41 is-fullwidth-code-point
Check if the character represented by a given Unicode code point is fullwidth
5.1.0 250,426,772 No SLSA provenance attestation
42 iconv-lite
Convert character encodings in pure javascript.
0.7.2 250,009,187 No SLSA provenance attestation
43 p-locate
Get the first fulfilled promise that satisfies the provided testing function
7.0.0 249,762,353 No SLSA provenance attestation
44 uuid
RFC9562 UUIDs
14.0.0 249,208,721 Signed with SLSA provenance attestation
45 json-schema-traverse
Traverse JSON Schema passing each schema object to callback
1.0.0 243,947,159 No SLSA provenance attestation
46 path-key
Get the PATH environment variable key cross-platform
4.0.0 236,119,653 No SLSA provenance attestation
47 ignore
Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.
7.0.5 234,568,439 No SLSA provenance attestation
48 esbuild
An extremely fast JavaScript and CSS bundler and minifier.
0.28.0 233,992,178 Signed with SLSA provenance attestation
49 js-yaml
YAML 1.2 parser and serializer
4.2.0 233,178,523 No SLSA provenance attestation
50 postcss
Tool for transforming styles with JS plugins
8.5.15 231,927,082 No SLSA provenance attestation
51 globals
Global identifiers from different JavaScript environments
17.6.0 230,234,407 No SLSA provenance attestation
52 isexe
Minimal module to check if a file is executable.
4.0.0 226,825,373 No SLSA provenance attestation
53 ws
Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js
8.21.0 221,887,801 No SLSA provenance attestation
54 agent-base
Turn a function into an `http.Agent` instance
9.0.0 221,764,622 Signed with SLSA provenance attestation
55 string_decoder
The string_decoder module from Node core
1.3.0 221,059,112 No SLSA provenance attestation
56 @esbuild/linux-x64
The Linux 64-bit binary for esbuild, a JavaScript bundler.
0.28.0 213,728,587 Signed with SLSA provenance attestation
57 resolve
resolve like require.resolve() on behalf of files asynchronously and synchronously
1.22.12 210,533,855 No SLSA provenance attestation
58 isarray
Array#isArray for older browsers
2.0.5 210,325,843 No SLSA provenance attestation
59 argparse
CLI arguments parser. Native port of python's argparse.
2.0.1 208,690,388 No SLSA provenance attestation
60 mime-db
Media Type Database
1.54.0 207,316,090 No SLSA provenance attestation
61 cross-spawn
Cross platform child_process#spawn and child_process#spawnSync
7.0.6 206,378,005 No SLSA provenance attestation
62 resolve-from
Resolve the path of a module like `require.resolve()` but from a given path
5.0.0 204,714,642 No SLSA provenance attestation
63 mime-types
The ultimate javascript content-type utility.
3.0.2 203,511,891 No SLSA provenance attestation
64 yargs-parser
the mighty option parser used by yargs
22.0.0 202,869,019 No SLSA provenance attestation
65 https-proxy-agent
An HTTP(s) proxy `http.Agent` implementation for HTTPS
9.0.0 201,903,976 Signed with SLSA provenance attestation
66 acorn
ECMAScript parser
8.16.0 200,309,888 No SLSA provenance attestation
67 @jridgewell/trace-mapping
Trace the original position through a source map
0.3.31 199,539,688 No SLSA provenance attestation
68 shebang-command
Get the command from a shebang
2.0.0 199,233,595 No SLSA provenance attestation
69 @babel/code-frame
Generate errors that contain a code frame that point to source locations.
7.29.7 199,126,959 Signed with SLSA provenance attestation
70 entities
Encode & decode XML and HTML entities with ease & speed
8.0.0 198,317,582 Signed with SLSA provenance attestation
71 yargs
yargs the modern, pirate-themed, successor to optimist.
18.0.0 196,300,638 No SLSA provenance attestation
72 typescript
TypeScript is a language for application scale JavaScript development
6.0.3 195,448,712 No SLSA provenance attestation
73 estraverse
ECMAScript JS AST traversal functions
5.3.0 195,235,683 No SLSA provenance attestation
74 shebang-regex
Regular expression for matching a shebang line
4.0.0 192,581,814 No SLSA provenance attestation
75 pretty-format
Stringify any JavaScript value.
30.4.1 189,097,374 No SLSA provenance attestation
76 cliui
easily create complex multi-column command-line-interfaces
9.0.1 188,561,615 No SLSA provenance attestation
77 js-tokens
Tiny JavaScript tokenizer.
10.0.0 188,397,412 No SLSA provenance attestation
78 fs-extra
fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.
11.3.5 188,173,808 No SLSA provenance attestation
79 nanoid
A tiny (118 bytes), secure URL-friendly unique string ID generator
5.1.11 186,670,375 No SLSA provenance attestation
80 picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
1.1.1 184,938,668 No SLSA provenance attestation
81 json5
JSON for Humans
2.2.3 184,801,503 No SLSA provenance attestation
82 hasown
A robust, ES3 compatible, "has own property" predicate.
2.0.4 182,883,979 No SLSA provenance attestation
83 path-to-regexp
Express style path to RegExp utility
8.4.2 181,106,102 No SLSA provenance attestation
84 @babel/types
Babel Types is a Lodash-esque utility library for AST nodes
7.29.7 180,983,670 Signed with SLSA provenance attestation
85 path-exists
Check if a path exists
5.0.0 180,810,153 No SLSA provenance attestation
86 zod
TypeScript-first schema declaration and validation library with static type inference
4.4.3 179,575,332 Signed with SLSA provenance attestation
87 @types/estree
TypeScript definitions for estree
1.0.9 179,306,056 No SLSA provenance attestation
88 eslint-scope
ECMAScript scope analyzer for ESLint
9.1.2 177,142,586 Signed with SLSA provenance attestation
89 webidl-conversions
Implements the WebIDL algorithms for converting to and from JavaScript values
8.0.1 176,552,858 Signed with SLSA provenance attestation
90 whatwg-url
An implementation of the WHATWG URL Standard's URL API and parsing machinery
16.0.1 174,820,840 Signed with SLSA provenance attestation
91 get-stream
Get a stream as a string, Buffer, ArrayBuffer or array
9.0.1 174,101,392 No SLSA provenance attestation
92 convert-source-map
Converts a source-map from/to different formats and allows adding/changing properties.
2.0.0 173,968,794 No SLSA provenance attestation
93 chokidar
Minimal and efficient cross-platform file watching library
5.0.0 173,416,264 Signed with SLSA provenance attestation
94 @babel/helper-validator-identifier
Validate identifier/keywords name
7.29.7 173,122,451 Signed with SLSA provenance attestation
95 punycode
A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.
2.3.1 172,115,413 No SLSA provenance attestation
96 @babel/parser
A JavaScript parser
7.29.7 171,918,304 Signed with SLSA provenance attestation
97 readdirp
Recursive version of fs.readdir with small RAM & CPU footprint
5.0.0 171,181,300 Signed with SLSA provenance attestation
98 graceful-fs
A drop-in replacement for fs, making various improvements.
4.2.11 170,209,766 No SLSA provenance attestation
99 function-bind
Implementation of Function.prototype.bind
1.1.2 169,504,068 No SLSA provenance attestation
100 negotiator
HTTP content negotiation
1.0.0 164,826,063 No SLSA provenance attestation