npm package report

Is classnames safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/classnames
npm packagelast checked 2026-07-17

classnames · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 15 graph-tracked dependencies · provenance: verified (sigstore)

Re-check live →

SIGNALS
Commit-Level AnalysisclearOK

1 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES
benchmark@^1.0.0clean
browserify@^14.1.0clean
classnames-local@file:.clean
classnames-npm@npm:classnames@*clean
dtslint@^4.0.9clean
http-server@^14.1.1clean
markdown-table@^3.0.3clean
mocha@^10.0.0clean
opn-cli@^3.1.0clean
rollup@^4.9.1clean
@rollup/plugin-commonjs@^25.0.7clean
@rollup/plugin-json@^6.1.0clean
@rollup/plugin-node-resolve@^15.2.3clean
tinybench@^2.5.1clean
tsd@^0.30.0clean
PACKAGE classnamesECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages