npm package report

Is webpack-cli safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/webpack-cli

npm packagelast checked 2026-09-19

webpack-cli · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 20 graph-tracked dependencies · provenance: verified (sigstore)

SIGNALS

Commit-Level AnalysisclearOK

7 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

Anomaly HistoryclearOK

1 historical anomaly alert(s) (transitive_malicious_dep) on this package. Add a version to check whether it is affected.

DEPENDENCIES

ajv@^4.11.3clean

ajv-keywords@^1.5.1clean

ansi-escapes@^4.2.1clean

babel-cli@^6.18.0clean

babel-code-frame@^6.22.0clean

@babel/core@^7.4.5clean

babel-core@^6.21.0clean

babel-eslint@^6.1.2clean

babel-jest@^19.0.0clean

babel-loader@^8.0.6clean

babel-plugin-syntax-dynamic-import@^6.18.0clean

babel-polyfill@^6.20.0clean

@babel/preset-env@^7.3.4clean

babel-preset-env@^1.6.1clean

babel-preset-es2015@^6.18.0clean

babel-preset-flow@^6.23.0clean

babel-preset-jest@^24.3.0clean

@babel/preset-react@^7.0.0clean

babel-preset-stage-3@^6.17.0clean

@babel/register@^7.0.0clean

PACKAGE webpack-cliECOSYSTEM npmDECISION ALLOW

Weekly downloads

28.9M

Centrality tier

tier 1

Build provenance

verified (sigstore)

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages