npm package report
Is auto safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
auto · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
all-contributors-cli@^5.10.2clean
arr-flatten@^1.1.0clean
async@~0.2.9clean
@atomist/slack-messages@~1.1.0clean
@auto-it/core@10.0.0clean
PACKAGE autoECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
169.1k
GitHub stars
2.4k
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
5
Baked snapshot · run a live check for the current verdict · browse all packages