Book a demo →
npm package report

Is chalk safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/chalk
npm packagelast checked 2026-07-17

chalk · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 13 graph-tracked dependencies · provenance: none found

Re-check live →

SIGNALS
All signals clearclearOK

No known-malicious match, advisory, commit-level finding or anomaly.

DEPENDENCIES
ansi-styles@~0.1.0clean
ava@*clean
c8@^7.10.0clean
color-convert@^2.0.1clean
coveralls@^2.11.2clean
escape-string-regexp@^1.0.0clean
execa@^0.7.0clean
flow-bin@^0.68.0clean
has-ansi@^0.1.0clean
has-color@~0.1.0clean
import-fresh@^2.0.0clean
log-update@^5.0.0clean
matcha@^0.5.0clean
PACKAGE chalkECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages