npm package report
Is bson safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
bson · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 23 graph-tracked dependencies · 2 flagged · provenance: verified (sigstore)
Advisory HistoryclearOK
3 historical advisory record(s) on this package (max severity CRITICAL). Add a version to check whether it is affected.
Commit-Level AnalysisclearOK
2 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.
Anomaly HistoryclearOK
1 historical anomaly alert(s) (maintainer_change) on this package. Add a version to check whether it is affected.
array-includes@^3.1.3clean
array.prototype.flatmap@^1.3.0clean
@babel/core@^7.1.5clean
babel-core@^6.14.0clean
babel-loader@^6.2.5clean
@babel/plugin-external-helpers@^7.10.4clean
babel-plugin-external-helpers@^6.22.0clean
babel-polyfill@^6.13.0clean
@babel/preset-env@^7.11.0clean
babel-preset-env@^1.6.0clean
babel-preset-es2015@^6.14.0clean
babel-preset-stage-0@^6.24.1clean
babel-register@^6.14.0clean
benchmark@1.0.0clean
bson-ext@~0.1clean
buffer@^5.1.0clean
chai@^4.1.2clean
chalk@^5.1.2clean
colors@1.1.0block
conventional-changelog-cli@^1.3.5clean
PACKAGE bsonECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
26.8M
GitHub stars
1.2k
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
23
Flagged dependencies
2
Baked snapshot · run a live check for the current verdict · browse all packages