npm package report

Is highlight.js safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/highlight.js

npm packagelast checked 2026-07-17

highlight.js · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 11 graph-tracked dependencies · 1 flagged · provenance: unknown

SIGNALS

Advisory HistoryclearOK

3 historical advisory record(s) on this package (max severity MODERATE). Add a version to check whether it is affected.

DEPENDENCIES

bluebird@^2.9.30clean

chai@*clean

clean-css@^4.2.1clean

cli-table@^0.3.1clean

colors@^1.1.2block

@colors/colors@^1.5.0clean

commander@*clean

css@^3.0.0clean

css-color-names@^1.0.1clean

deep-freeze-es6@^1.3.1clean

del@^0.1.2clean

PACKAGE highlight.jsECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages