npm package report

Is apache-arrow safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/apache-arrow

npm packagelast checked 2026-09-19

apache-arrow · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 7 graph-tracked dependencies · provenance: unknown

SIGNALS

Commit-Level AnalysisclearOK

1 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

Anomaly HistoryclearOK

1 historical anomaly alert(s) (transitive_malicious_dep) on this package. Add a version to check whether it is affected.

DEPENDENCIES

command-line-args@^6.0.1clean

command-line-usage@^7.0.1clean

@swc/helpers@^0.5.11clean

tslib@^2.6.2clean

@types/command-line-args@^5.2.3clean

@types/command-line-usage@^5.0.4clean

@types/node@^24.0.3clean

PACKAGE apache-arrowECOSYSTEM npmDECISION ALLOW

Weekly downloads

9.3M

GitHub stars

Centrality tier

tier 2

Build provenance

unknown

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages