npm package report

Is enhanced-resolve safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/enhanced-resolve
npm packagelast checked 2026-09-19

enhanced-resolve · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 17 graph-tracked dependencies · provenance: verified (sigstore)

Re-check live →

SIGNALS
Commit-Level AnalysisclearOK

5 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES
beautify-lint@^1.0.3clean
codecov.io@^0.1.6clean
coveralls@^2.11.6clean
cspell@4.2.8clean
eslint@^1.1.0clean
eslint-config-prettier@^3.3.0clean
eslint-plugin-jsdoc@^15.2.0clean
eslint-plugin-node@^11.0.0clean
eslint-plugin-nodeca@^1.0.3clean
eslint-plugin-prettier@^3.0.0clean
graceful-fs@~2.0.3clean
husky@^1.2.0clean
istanbul@^0.3.5clean
jest@^27.5.1clean
js-beautify@^1.5.10clean
lint-staged@^10.4.0clean
memfs@^2.15.4clean
PACKAGE enhanced-resolveECOSYSTEM npmDECISION ALLOW

Package facts

Weekly downloads
154.4M
GitHub stars
976
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
17

History on this package: popular package (152 versions over 94d) with pattern-only evidence — de-escalated for review rather than blocked

Baked snapshot · run a live check for the current verdict · browse all packages

Other package reports

esbuildeslinteslint-config-prettieremotion__styledemotion__reactdotenv-expand

See all package reports or check any package live.