npm package report
Is compression safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
compression · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 4 graph-tracked dependencies · provenance: verified (sigstore)
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
accepts@1.0.2clean
after@0.8.2clean
bytes@0.2.1clean
compressible@1.0.0clean
PACKAGE compressionECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
111.1M
GitHub stars
2.8k
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
4
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
concurrentlycontent-typecookiecommitlint__config-conventionalcommitlint__clicommitizen