npm package report
Is @changesets/cli safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@changesets/cli · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 6 graph-tracked dependencies · provenance: verified (sigstore)
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
ansi-colors@^4.1.3clean
@babel/runtime@^7.10.4clean
bolt@^0.22.1clean
boxen@^1.3.0clean
chalk@^2.1.0clean
@changesets/apply-release-plan@^0.2.0clean
PACKAGE @changesets/cliECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
4.7M
GitHub stars
11.2k
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
6
History on this package: popular package (121 versions over 92d) with pattern-only evidence — de-escalated for review rather than blocked
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
chart.jscheeriochokidarchangesets__changelog-githubchalkchai-as-promised