npm package report
Is webpack-bundle-analyzer safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
webpack-bundle-analyzer · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 7 graph-tracked dependencies · provenance: verified (sigstore)
Advisory HistoryclearOK
1 historical advisory record(s) on this package (max severity MODERATE). Add a version to check whether it is affected.
Commit-Level AnalysisclearOK
1 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.
acorn@^4.0.11clean
acorn-walk@^6.1.1clean
autoprefixer@10.0.1clean
@babel/cli@^7.28.6clean
@babel/core@7.0.0clean
babel-core@^6.17.0clean
babel-eslint@10.0.1clean
PACKAGE webpack-bundle-analyzerECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
52.7M
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
7
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
webpack-cliwebpack-dev-middlewarewebpack-dev-serverwebpackweb-vitalsvue__test-utils