Products
Platform
// dashboard, proxy & brain
XYZ Scanner
// the CLI
VSCode extension
// inline in your editor
Pricing
Resources
Blog
// research notes
Research
// the methodology
Case studies
// attacks we caught
Coverage
// what we watch
Docs
// CLI & API
Partners
Login
Book a demo →
Package reports
npm package
security reports.
128 packages checked against the XYZ decision brain. Or
check any package live
.
ajv
npm
allow
angular
npm
allow
axios
npm
allow
babel-loader
npm
allow
bcrypt
npm
allow
bcryptjs
npm
allow
body-parser
npm
allow
bootstrap
npm
allow
chai
npm
allow
chalk
npm
allow
chart.js
npm
allow
cheerio
npm
allow
chokidar
npm
allow
classnames
npm
allow
clsx
npm
allow
coa
npm
allow
colors
npm
allow
commander
npm
allow
concurrently
npm
allow
cors
npm
allow
cross-env
npm
allow
cypress
npm
allow
d3
npm
allow
date-fns
npm
allow
dayjs
npm
allow
debug
npm
allow
dompurify
npm
allow
dotenv
npm
allow
esbuild
npm
allow
eslint
npm
allow
eslint-scope
npm
allow
event-stream
npm
allow
express
npm
allow
faker
npm
block
fastify
npm
allow
flatmap-stream
npm
allow
form-data
npm
allow
formik
npm
allow
fs-extra
npm
allow
glob
npm
allow
got
npm
allow
hapi
npm
allow
helmet
npm
allow
highlight.js
npm
allow
immer
npm
allow
inquirer
npm
allow
ioredis
npm
allow
jest
npm
allow
jest-canvas-mock
npm
allow
joi
npm
allow
jquery
npm
allow
js-yaml
npm
allow
jsdom
npm
allow
jsonwebtoken
npm
allow
koa
npm
allow
left-pad
npm
allow
less
npm
allow
lodash
npm
allow
luxon
npm
allow
markdown-it
npm
allow
marked
npm
allow
minimist
npm
allow
mkdirp
npm
allow
mobx
npm
allow
mocha
npm
allow
moment
npm
allow
mongoose
npm
allow
morgan
npm
allow
multer
npm
allow
mysql2
npm
allow
nanoid
npm
allow
nest
npm
allow
next
npm
allow
node-fetch
npm
allow
node-ipc
npm
allow
nodemon
npm
allow
nuxt
npm
allow
ora
npm
allow
parcel
npm
allow
passport
npm
allow
pg
npm
allow
pino
npm
allow
playwright
npm
allow
postcss
npm
allow
prettier
npm
allow
prisma
npm
allow
puppeteer
npm
allow
qs
npm
allow
query-string
npm
allow
ramda
npm
allow
rc
npm
allow
react
npm
allow
react-dom
npm
allow
react-hook-form
npm
allow
react-router-dom
npm
allow
redis
npm
allow
redux
npm
allow
rimraf
npm
allow
rollup
npm
allow
rxjs
npm
allow
sanitize-html
npm
allow
sass
npm
allow
semver
npm
allow
sequelize
npm
allow
sharp
npm
allow
socket.io
npm
allow
styled-components
npm
allow
superagent
npm
allow
svelte
npm
allow
tailwindcss
npm
allow
three
npm
allow
typescript
npm
allow
ua-parser-js
npm
allow
underscore
npm
allow
undici
npm
allow
uuid
npm
allow
validator
npm
allow
vite
npm
allow
vitest
npm
allow
vue
npm
allow
webpack
npm
allow
winston
npm
allow
ws
npm
allow
xml2js
npm
allow
yargs
npm
allow
yup
npm
allow
zod
npm
allow
zustand
npm
allow
