npm package report

Is globals safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/globals

npm packagelast checked 2026-09-19

globals · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 15 graph-tracked dependencies · provenance: none found

SIGNALS

All signals clearclearOK

No known-malicious match, advisory, commit-level finding or anomaly.

DEPENDENCIES

ava@*clean

cheerio@^1.0.0clean

eslint-plugin-jest@^27.9.0clean

execa@^8.0.1clean

get-port@^7.0.0clean

is-identifier@^1.0.1clean

mocha@*clean

nano-spawn@^0.2.0clean

npm-run-all2@^6.1.2clean

outdent@^0.8.0clean

patch-package@^8.0.0clean

puppeteer@^22.1.0clean

shelljs@^0.8.5clean

tsd@^0.14.0clean

type-fest@^0.20.2clean

PACKAGE globalsECOSYSTEM npmDECISION ALLOW

Weekly downloads

GitHub stars

552

Centrality tier

tier 1

Build provenance

none found

Direct dependencies

History on this package: OpenSSF Scorecard overall=4.5 (2-5 — weak hygiene)

Baked snapshot · run a live check for the current verdict · browse all packages