npm package report
Is @antv/g2 safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@antv/g2 · verdict BLOCK · blocked
9.2/10
XYZ SCORE
Known Malicious PackagematchedCRITICAL
Human-verified malicious package in the CyberXYZ corpus (Signal C).
Commit-Level AnalysisclearOK
2 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.
PACKAGE @antv/g2ECOSYSTEM npmDECISION BLOCK
Package facts
Weekly downloads
759.9k
GitHub stars
12.5k
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
0
History on this package: OpenSSF Scorecard overall=3.3 (2-5 — weak hygiene)
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
antv__g2plotantv__g6antv__graphinantv__g-plugin-canvas-pickerantv__g-liteantv__g-canvas