npm package report

Is browserslist safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/browserslist

npm packagelast checked 2026-09-19

browserslist · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 3 graph-tracked dependencies · provenance: verified (sigstore)

SIGNALS

Advisory HistoryclearOK

3 historical advisory record(s) on this package (max severity HIGH). Add a version to check whether it is affected.

Commit-Level AnalysisclearOK

3 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES

ava@0.11.0clean

baseline-browser-mapping@^2.10.44clean

caniuse-db@^1.0.30000032 clean

PACKAGE browserslistECOSYSTEM npmDECISION ALLOW

Weekly downloads

260.5M

GitHub stars

13.5k

Centrality tier

tier 1

Build provenance

verified (sigstore)

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages