npm package report

Is c8 safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/c8

npm packagelast checked 2026-09-19

c8 · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 15 graph-tracked dependencies · provenance: none found

SIGNALS

All signals clearclearOK

No known-malicious match, advisory, commit-level finding or anomaly.

DEPENDENCIES

@bcoe/istanbul-reports@^3.0.0-alpha.5clean

@bcoe/v8-coverage@^0.1.0clean

bundle-dependencies@^1.0.2clean

@c88/v8-coverage@^0.1.0clean

chai@^4.1.2clean

chai-jest-snapshot@^2.0.0clean

chrome-remote-interface@^0.25.2clean

coveralls@^3.0.2clean

cross-env@^7.0.3clean

find-up@^2.1.0clean

foreground-child@^1.5.6clean

furi@^1.0.0clean

get-port@^3.2.0clean

@istanbuljs/schema@^0.1.2clean

istanbul-lib-coverage@^1.1.1clean

PACKAGE c8ECOSYSTEM npmDECISION ALLOW

Weekly downloads

8.3M

GitHub stars

2.1k

Centrality tier

tier 1

Build provenance

none found

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages