npm package report
Is eslint-plugin-mocha safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
eslint-plugin-mocha · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 5 graph-tracked dependencies · provenance: verified (sigstore)
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
chai@3.2.0clean
coveralls@2.11.1clean
eslint@0.23.0clean
@eslint-community/eslint-utils@4.10.1clean
eslint-config-holidaycheck@^0.12.1clean
PACKAGE eslint-plugin-mochaECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
8M
GitHub stars
289
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
5
Baked snapshot · run a live check for the current verdict · browse all packages