Is mocha safe? npm package security report

cyberxyz.io/packages/npm/mocha

npm packagelast checked 2026-07-17

mocha · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 11 graph-tracked dependencies · provenance: unknown

SIGNALS

Anomaly HistoryclearOK

1 historical anomaly alert(s) (transitive_malicious_dep) on this package. Add a version to check whether it is affected.

DEPENDENCIES

@11ty/eleventy@^0.10.0clean

@11ty/eleventy-plugin-inclusive-language@^1.0.0clean

acorn@^7.0.0clean

ansi-colors@3.2.3clean

assert@^1.4.1clean

assetgraph-builder@^5.6.4clean

autoprefixer@^9.4.10clean

babel-eslint@^10.0.3clean

@babel/eslint-parser@^7.15.4clean

@babel/plugin-transform-regenerator@7.12.1clean

@babel/preset-env@^7.10.4clean

PACKAGE mochaECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages