npm package report

Is parcel safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/parcel
npm packagelast checked 2026-07-17

parcel · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 20 graph-tracked dependencies · provenance: unknown

Re-check live →

SIGNALS
Anomaly HistoryclearOK

1 historical anomaly alert(s) (transitive_malicious_dep) on this package. Add a version to check whether it is affected.

DEPENDENCIES
ansi-to-html@^0.6.4clean
aws-sdk@0.9.xclean
@babel/cli@^7.0.0clean
babel-cli@^6.26.0clean
@babel/code-frame@^7.0.0clean
babel-code-frame@^6.26.0clean
@babel/core@^7.0.0clean
babel-core@^6.25.0clean
@babel/generator@^7.0.0clean
babel-generator@^6.25.0clean
@babel/parser@^7.0.0clean
@babel/plugin-syntax-export-default-from@^7.0.0clean
@babel/plugin-syntax-export-namespace-from@^7.0.0clean
babel-plugin-transform-async-super@^1.0.0clean
babel-plugin-transform-es2015-modules-commonjs@^6.26.0clean
@babel/plugin-transform-flow-strip-types@^7.0.0clean
@babel/plugin-transform-modules-commonjs@^7.0.0clean
@babel/plugin-transform-react-jsx@^7.0.0clean
babel-plugin-transform-react-jsx@^6.24.1clean
@babel/plugin-transform-runtime@^7.0.0clean
PACKAGE parcelECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages