npm package report
Is commitizen safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
commitizen · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 8 graph-tracked dependencies · 1 flagged · provenance: verified (sigstore)
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
axios@0.12.0block
babel@5.8.23clean
@babel/cli@^7.1.0clean
babel-cli@6.11.4clean
@babel/core@^7.1.0clean
babel-core@6.13.2clean
babel-plugin-istanbul@5.1.4clean
@babel/plugin-proposal-object-rest-spread@7.11.0clean
PACKAGE commitizenECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
3.7M
GitHub stars
17.4k
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
8
Flagged dependencies
1
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
commitlint__clicommitlint__config-conventionalcompressioncommandercolorscoa