npm package report
Is ali-oss safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
ali-oss · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 18 graph-tracked dependencies · 1 flagged · provenance: unknown
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
address@^1.0.0clean
agentkeepalive@~1.2.0clean
aliasify@^1.9.0clean
@alicloud/openapi-client@^0.4.10clean
@alicloud/resourcemanager20200331@^2.3.0clean
@alicloud/tea-util@^1.4.9clean
ali.regenerator@*clean
any-promise@^1.3.0clean
autod@*clean
axios@^0.27.2block
@babel/core@^7.11.6clean
babelify@^10.0.0clean
@babel/plugin-transform-regenerator@^7.10.4clean
babel-plugin-transform-regenerator@^6.26.0clean
@babel/plugin-transform-runtime@^7.11.5clean
babel-plugin-transform-runtime@^6.6.0clean
babel-polyfill@^6.3.14clean
@babel/preset-env@^7.11.5clean
PACKAGE ali-ossECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
356.3k
GitHub stars
2k
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
18
Flagged dependencies
1
Baked snapshot · run a live check for the current verdict · browse all packages