npm package report

Is @commitlint/cli safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/commitlint__cli

npm packagelast checked 2026-09-19

@commitlint/cli · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 10 graph-tracked dependencies · provenance: none found

SIGNALS

Commit-Level AnalysisclearOK

12 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES

ava@^0.18.2clean

@babel/cli@^7.11.6clean

babel-cli@^6.26.0clean

@babel/core@^7.11.6clean

babel-polyfill@^6.23.0clean

babel-preset-commitlint@^10.0.0clean

babel-register@^6.26.0clean

@babel/runtime@^7.11.2clean

babel-runtime@^6.26.0clean

chalk@^2.0.1clean

PACKAGE @commitlint/cliECOSYSTEM npmDECISION ALLOW

Weekly downloads

14.7M

GitHub stars

18.2k

Centrality tier

tier 1

Build provenance

none found

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages