npm package report

Is cheerio safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/cheerio
npm packagelast checked 2026-06-10

cheerio · verdict ALERT · review advised

4.0/10
XYZ SCORE
SUMMARY

Verdict ALERT · 40 known dependencies · provenance: none found

Re-check live →

SIGNALS
Commit-Level AnalysistriggeredHIGH

build(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 (#5206) Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 4.0.0 to 5.0.0. - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](https

Anomaly HistoryclearOK

1 historical anomaly alert(s) (maintainer_change) on this package. Add a version to check whether it is affected.

DEPENDENCIES
benchmark@~1.0.0clean
benchmark@^2.1.0clean
benchmark@^2.1.4clean
cheerio-select@*clean
cheerio-select@^1.3.0clean
cheerio-select@^1.4.0clean
cheerio-select@^1.5.0clean
cheerio-select@^2.1.0clean
cheerio-select@github:cheeriojs/cheerio-selectclean
cheerio-select-tmp@^0.1.0clean
cheerio-soupselect@*clean
cheerio-soupselect@0.0.xclean
clean-jsdoc-theme@^3.1.2clean
coffee-script@*clean
coffee-script@1.1.xclean
coveralls@~2.10clean
coveralls@^2.11.9clean
coveralls@^3.0.2clean
css-select@~1.0.0clean
css-select@~1.2.0clean
PACKAGE cheerioECOSYSTEM npmDECISION ALERT

Baked snapshot · run a live check for the current verdict · browse all packages