npm package report

Is typescript safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/typescript
npm packagelast checked 2026-06-10

typescript · verdict ALERT · review advised

4.0/10
XYZ SCORE
SUMMARY

Verdict ALERT · 40 known dependencies · 1 flagged · provenance: none found

Re-check live →

SIGNALS
Commit-Level AnalysistriggeredHIGH

Switch from bot PAT to GitHub App token via Azure Key Vault (#63538)

DEPENDENCIES
async@latestclean
azure-devops-node-api@^10.1.0clean
azure-devops-node-api@^11.0.1clean
azure-devops-node-api@^11.1.1clean
azure-devops-node-api@^11.2.0clean
azure-devops-node-api@^12.0.0clean
azure-devops-node-api@^12.3.0clean
azure-devops-node-api@^12.4.0clean
azure-devops-node-api@^12.5.0clean
azure-devops-node-api@^13.0.0clean
azure-devops-node-api@^14.0.1clean
azure-devops-node-api@^14.0.2clean
azure-devops-node-api@^14.1.0clean
azure-devops-node-api@^8.0.0clean
browserify@latestclean
browser-resolve@^1.11.2clean
c8@^10.1.2clean
c8@^10.1.3clean
c8@^7.14.0clean
c8@^9.1.0clean
PACKAGE typescriptECOSYSTEM npmDECISION ALERT

Baked snapshot · run a live check for the current verdict · browse all packages