npm package report

Is ali-oss safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/ali-oss
npm packagelast checked 2026-09-19

ali-oss · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 18 graph-tracked dependencies · 1 flagged · provenance: unknown

Re-check live →

SIGNALS
All signals clearclearOK

No known-malicious match, advisory, commit-level finding or anomaly.

DEPENDENCIES
address@^1.0.0clean
agentkeepalive@~1.2.0clean
aliasify@^1.9.0clean
@alicloud/openapi-client@^0.4.10clean
@alicloud/resourcemanager20200331@^2.3.0clean
@alicloud/tea-util@^1.4.9clean
ali.regenerator@*clean
any-promise@^1.3.0clean
autod@*clean
axios@^0.27.2block
@babel/core@^7.11.6clean
babelify@^10.0.0clean
@babel/plugin-transform-regenerator@^7.10.4clean
babel-plugin-transform-regenerator@^6.26.0clean
@babel/plugin-transform-runtime@^7.11.5clean
babel-plugin-transform-runtime@^6.6.0clean
babel-polyfill@^6.3.14clean
@babel/preset-env@^7.11.5clean
PACKAGE ali-ossECOSYSTEM npmDECISION ALLOW

Package facts

Weekly downloads
356.3k
GitHub stars
2k
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
18
Flagged dependencies
1

Baked snapshot · run a live check for the current verdict · browse all packages

Other package reports

all-contributors-clialloc__quick-lruamazon-chime-sdk-jsalgoliasearchalgolia__requester-node-httpalgolia__requester-fetch

See all package reports or check any package live.