npm package report

Is handlebars safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/handlebars

npm packagelast checked 2026-09-19

handlebars · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 25 graph-tracked dependencies · provenance: none found

SIGNALS

Advisory HistoryclearOK

29 historical advisory record(s) on this package (max severity CRITICAL). Add a version to check whether it is affected.

DEPENDENCIES

async@~0.2.9clean

aws-sdk@~1.5.0clean

babel-loader@^5.0.0clean

babel-runtime@^5.1.10clean

benchmark@~1.0clean

chai@^4.2.0clean

chai-diff@^1.0.1clean

concurrently@^5.0.0clean

dirty-chai@^2.0.1clean

dtslint@^0.5.5clean

dust@~0.3clean

dustjs-linkedin@^2.0.2clean

eco@~1.1.0-rc-3clean

es6-module-packager@*clean

eslint@^6.7.2clean

eslint-config-prettier@^6.7.0clean

eslint-plugin-compat@^3.13.0clean

eslint-plugin-es5@^1.4.1clean

fs-extra@^8.1.0clean

grunt@~0.4.1clean

PACKAGE handlebarsECOSYSTEM npmDECISION ALLOW

Weekly downloads

170.1M

GitHub stars

18.6k

Centrality tier

tier 1

Build provenance

none found

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages