npm package report

Is classnames safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/classnames
npm packagelast checked 2026-06-10

classnames · verdict ALERT · review advised

4.0/10
XYZ SCORE
SUMMARY

Verdict ALERT · 21 known dependencies · provenance: verified (sigstore)

Re-check live →

SIGNALS
Commit-Level AnalysistriggeredHIGH

Bump tinybench from 6.0.0 to 6.0.1 (#555) Bumps [tinybench](https://github.com/tinylibs/tinybench) from 6.0.0 to 6.0.1. - [Release notes](https://github.com/tinylibs/tinybench/releases) - [Commits](https://github.com/tinylibs/tinybench/compare/v6.0.0...v6.0.1) --- updated-depen

DEPENDENCIES
benchmark@^1.0.0clean
benchmark@^2.1.4clean
browserify@^14.1.0clean
browserify@^16.2.3clean
browserify@^17.0.0clean
classnames-local@file:.clean
classnames-npm@npm:classnames@*clean
dtslint@^4.0.9clean
http-server@^14.1.1clean
markdown-table@^3.0.3clean
mocha@^10.0.0clean
mocha@^2.1.0clean
mocha@^8.3.2clean
opn-cli@^3.1.0clean
rollup@^4.9.1clean
@rollup/plugin-commonjs@^25.0.7clean
@rollup/plugin-json@^6.1.0clean
@rollup/plugin-node-resolve@^15.2.3clean
tinybench@^2.5.1clean
tsd@^0.30.0clean
PACKAGE classnamesECOSYSTEM npmDECISION ALERT

Baked snapshot · run a live check for the current verdict · browse all packages