npm package report

Is yup safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/yup
npm packagelast checked 2026-06-10

yup · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 40 known dependencies · provenance: unknown

Re-check live →

SIGNALS
All signals clearclearOK

No known-malicious match, advisory, commit-level finding or anomaly.

DEPENDENCIES
@4c/cli@^2.1.12clean
@4c/cli@^3.0.1clean
@4c/rollout@^1.1.0clean
@4c/rollout@^1.3.3clean
@4c/rollout@^2.1.10clean
@4c/rollout@^2.1.11clean
@4c/rollout@^2.1.2clean
@4c/rollout@^2.1.7clean
@4c/rollout@^2.1.9clean
@4c/rollout@^3.0.1clean
@4c/tsconfig@^0.3.1clean
@4c/tsconfig@^0.4.0clean
babel@^5.8.23clean
@babel/cli@7.0.0clean
@babel/cli@^7.0.0-beta.47clean
@babel/cli@7.0.0-beta.47clean
@babel/cli@7.0.0-rc.1clean
@babel/cli@7.10.5clean
@babel/cli@7.12.1clean
@babel/cli@7.12.10clean
PACKAGE yupECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages