npm package report

Is @typescript-eslint/eslint-plugin safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/typescript-eslint__eslint-plugin

npm packagelast checked 2026-09-19

@typescript-eslint/eslint-plugin · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 15 graph-tracked dependencies · provenance: verified (sigstore)

SIGNALS

Commit-Level AnalysisclearOK

5 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

Anomaly HistoryclearOK

12 historical anomaly alert(s) (version_jump) on this package. Add a version to check whether it is affected.

DEPENDENCIES

ajv@^6.12.6clean

chalk@^2.4.2clean

cross-env@^7.0.3clean

cross-fetch@*clean

debug@^4.1.1clean

eslint@*clean

@eslint-community/regexpp@^4.10.0clean

eslint-docs@^0.2.6clean

eslint-utils@^1.3.1clean

espree@^10.0.1clean

functional-red-black-tree@^1.0.1clean

graphemer@^1.4.0clean

grapheme-splitter@^1.0.4clean

ignore@^5.1.8clean

jest@29.6.2clean

PACKAGE @typescript-eslint/eslint-pluginECOSYSTEM npmDECISION ALLOW

Weekly downloads

540.2M

Centrality tier

tier 1

Build provenance

verified (sigstore)

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages