npm package report
Is webpack-dev-middleware safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
webpack-dev-middleware · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 5 graph-tracked dependencies · provenance: verified (sigstore)
Advisory HistoryclearOK
3 historical advisory record(s) on this package (max severity HIGH). Add a version to check whether it is affected.
Commit-Level AnalysisclearOK
2 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.
assert@^1.4.1clean
@babel/cli@^7.10.3clean
@babel/core@^7.10.3clean
babel-jest@24.8.0clean
@babel/preset-env@^7.10.3clean
PACKAGE webpack-dev-middlewareECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
64.4M
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
5
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
webpack-dev-serverwebpack-sourceswhichwebpack-cliwebpack-bundle-analyzerwebpack