npm package report
Is archiver safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
archiver · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 8 graph-tracked dependencies · provenance: verified (sigstore)
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
archiver-jsdoc-theme@^1.0.0clean
archiver-json@~0.1.0clean
archiver-tar@~0.1.0clean
archiver-utils@~0.3.0clean
archiver-zip@~0.1.0clean
async@~0.9.0clean
buffer-crc32@^0.2.1clean
chai@~1.10.0clean
PACKAGE archiverECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
49.2M
GitHub stars
2.9k
Centrality tier
tier 2
Build provenance
verified (sigstore)
Direct dependencies
8
History on this package: OpenSSF Scorecard overall=4.6 (2-5 — weak hygiene)
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
archiver-utilsardatan__sync-fetchare-we-there-yetarchive-typearchitect__parserarch