npm package report

Is caniuse-lite safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/caniuse-lite

npm packagelast checked 2026-09-19

caniuse-lite · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 11 graph-tracked dependencies · provenance: verified (sigstore)

SIGNALS

Commit-Level AnalysisclearOK

10 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES

all-contributors-cli@^3.0.7clean

alphanum-sort@^1.0.2clean

any-observable@^0.2.0clean

ava@^0.17.0clean

babel-cli@^6.24.0clean

babel-generator@^6.21.0clean

babel-preset-env@^1.1.8clean

babel-register@^6.18.0clean

babel-types@^6.21.0clean

bunyan@^1.8.10clean

caniuse-db@^1.0.30000605clean

PACKAGE caniuse-liteECOSYSTEM npmDECISION ALLOW

Weekly downloads

265.7M

GitHub stars

601

Centrality tier

tier 1

Build provenance

verified (sigstore)

Direct dependencies

History on this package: OpenSSF Scorecard overall=4.6 (2-5 — weak hygiene)

Baked snapshot · run a live check for the current verdict · browse all packages