npm package report

Is @commitlint/config-conventional safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/commitlint__config-conventional

npm packagelast checked 2026-09-19

@commitlint/config-conventional · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 1 graph-tracked dependencies · provenance: none found

SIGNALS

Commit-Level AnalysisclearOK

12 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES

@commitlint/lint@^10.0.0clean

PACKAGE @commitlint/config-conventionalECOSYSTEM npmDECISION ALLOW

Weekly downloads

13.8M

GitHub stars

18.2k

Centrality tier

tier 1

Build provenance

none found

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages