npm package report

Is @alloc/quick-lru safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/alloc__quick-lru

npm packagelast checked 2026-09-19

@alloc/quick-lru · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 5 graph-tracked dependencies · provenance: unknown

SIGNALS

All signals clearclearOK

No known-malicious match, advisory, commit-level finding or anomaly.

DEPENDENCIES

ava@^2.0.0clean

coveralls@^3.0.3clean

nyc@^15.0.0clean

tsd@^0.11.0clean

xo@^0.26.0clean

PACKAGE @alloc/quick-lruECOSYSTEM npmDECISION ALLOW

Weekly downloads

71.2M

GitHub stars

746

Centrality tier

tier 2

Build provenance

unknown

Direct dependencies

History on this package: OpenSSF Scorecard overall=3.7 (2-5 — weak hygiene)

Baked snapshot · run a live check for the current verdict · browse all packages