greenflagged

A private npm registry that scans every package before it reaches your codebase.

Top 100 npm packages by weekly downloads

20% ship provenance.

# Package Latest Weekly downloads Provenance
1 semver
The semantic version parser used by npm.
7.8.1 718,498,270 Signed with SLSA provenance attestation
2 minimatch
a glob matcher in javascript
10.2.5 620,833,191 No SLSA provenance attestation
3 debug
Lightweight debugging utility for Node.js and the browser
4.4.3 611,370,945 No SLSA provenance attestation
4 strip-ansi
Strip ANSI escape codes from a string
7.2.0 513,097,878 No SLSA provenance attestation
5 brace-expansion
Brace expansion as known from sh/bash
5.0.6 510,843,890 No SLSA provenance attestation
6 ansi-styles
ANSI escape codes for styling strings in the terminal
6.2.3 499,696,175 No SLSA provenance attestation
7 ansi-regex
Regular expression for matching ANSI escape codes
6.2.2 480,561,936 No SLSA provenance attestation
8 ms
Tiny millisecond conversion utility
2.1.3 478,894,239 No SLSA provenance attestation
9 string-width
Get the visual width of a string - the number of columns required to display it
8.2.1 452,427,330 No SLSA provenance attestation
10 supports-color
Detect whether a terminal supports color
10.2.2 447,986,255 No SLSA provenance attestation
11 lru-cache
A cache object that deletes the least-recently-used items.
11.5.1 446,976,277 No SLSA provenance attestation
12 commander
the complete solution for node.js command-line programs
15.0.0 415,016,533 No SLSA provenance attestation
13 chalk
Terminal string styling done right
5.6.2 409,735,809 No SLSA provenance attestation
14 emoji-regex
A regular expression to match all Emoji-only symbols as per the Unicode Standard.
10.6.0 400,789,377 Signed with SLSA provenance attestation
15 picomatch
Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.
4.0.4 388,584,331 No SLSA provenance attestation
16 wrap-ansi
Wordwrap a string with ANSI escape codes
10.0.0 386,852,598 No SLSA provenance attestation
17 tslib
Runtime library for TypeScript helper functions
2.8.1 383,769,304 No SLSA provenance attestation
18 glob
the most correct and second fastest glob implementation in JavaScript
13.0.6 345,940,216 No SLSA provenance attestation
19 @types/node
TypeScript definitions for node
25.9.1 331,479,016 No SLSA provenance attestation
20 type-fest
A collection of essential TypeScript types
5.6.0 325,927,980 No SLSA provenance attestation
21 color-name
A list of color names and its values
2.1.0 314,980,803 No SLSA provenance attestation
22 minipass
minimal implementation of a PassThrough stream
7.1.3 312,747,345 No SLSA provenance attestation
23 balanced-match
Match balanced character pairs, like "{" and "}"
4.0.4 309,197,940 No SLSA provenance attestation
24 source-map
Generates and consumes source maps
0.7.6 300,499,927 No SLSA provenance attestation
25 color-convert
Plain color conversion functions
3.1.3 300,045,568 No SLSA provenance attestation
26 eslint-visitor-keys
Constants and utilities about visitor keys to traverse AST.
5.0.1 299,157,587 Signed with SLSA provenance attestation
27 ajv
Another JSON Schema Validator
8.20.0 290,842,656 No SLSA provenance attestation
28 react-is
Brand checking of React Elements.
19.2.6 290,307,389 No SLSA provenance attestation
29 which
Like which(1) unix command. Find the first instance of an executable in the PATH.
7.0.0 289,741,429 Signed with SLSA provenance attestation
30 readable-stream
Node.js Streams, a user-land copy of the stream library from Node.js
4.7.0 284,623,515 No SLSA provenance attestation
31 has-flag
Check if argv has a specific flag
5.0.1 283,819,705 No SLSA provenance attestation
32 escape-string-regexp
Escape RegExp special characters
5.0.0 281,634,483 No SLSA provenance attestation
33 yallist
Yet Another Linked List
5.0.0 271,684,874 No SLSA provenance attestation
34 glob-parent
Extract the non-magic parent path from a glob string.
6.0.2 269,675,129 No SLSA provenance attestation
35 locate-path
Get the first path that exists on disk of multiple paths
8.0.0 265,273,919 No SLSA provenance attestation
36 p-locate
Get the first fulfilled promise that satisfies the provided testing function
7.0.0 264,366,253 No SLSA provenance attestation
37 find-up
Find a file or directory by walking up parent directories
8.0.0 258,255,599 No SLSA provenance attestation
38 safe-buffer
Safer Node.js Buffer API
5.2.1 258,042,899 No SLSA provenance attestation
39 p-limit
Run multiple promise-returning & async functions with limited concurrency
7.3.0 257,483,886 No SLSA provenance attestation
40 undici-types
A stand-alone types package for Undici
8.3.0 251,921,446 Signed with SLSA provenance attestation
41 iconv-lite
Convert character encodings in pure javascript.
0.7.2 250,009,187 No SLSA provenance attestation
42 uuid
RFC9562 UUIDs
14.0.0 249,208,721 Signed with SLSA provenance attestation
43 ignore
Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.
7.0.5 248,214,211 No SLSA provenance attestation
44 signal-exit
when you want to fire an event no matter how a process exits.
4.1.0 247,630,583 No SLSA provenance attestation
45 json-schema-traverse
Traverse JSON Schema passing each schema object to callback
1.0.0 243,947,159 No SLSA provenance attestation
46 is-fullwidth-code-point
Check if the character represented by a given Unicode code point is fullwidth
5.1.0 238,826,290 No SLSA provenance attestation
47 js-yaml
YAML 1.2 parser and serializer
4.1.1 232,673,598 No SLSA provenance attestation
48 postcss
Tool for transforming styles with JS plugins
8.5.15 231,927,082 No SLSA provenance attestation
49 isexe
Minimal module to check if a file is executable.
4.0.0 226,825,373 No SLSA provenance attestation
50 esbuild
An extremely fast JavaScript and CSS bundler and minifier.
0.28.0 226,766,181 Signed with SLSA provenance attestation
51 path-key
Get the PATH environment variable key cross-platform
4.0.0 225,951,737 No SLSA provenance attestation
52 resolve
resolve like require.resolve() on behalf of files asynchronously and synchronously
1.22.12 223,004,121 No SLSA provenance attestation
53 globals
Global identifiers from different JavaScript environments
17.6.0 221,780,023 No SLSA provenance attestation
54 ws
Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js
8.21.0 214,346,820 No SLSA provenance attestation
55 @esbuild/linux-x64
The Linux 64-bit binary for esbuild, a JavaScript bundler.
0.28.0 213,728,587 Signed with SLSA provenance attestation
56 isarray
Array#isArray for older browsers
2.0.5 210,325,843 No SLSA provenance attestation
57 argparse
CLI arguments parser. Native port of python's argparse.
2.0.1 208,690,388 No SLSA provenance attestation
58 string_decoder
The string_decoder module from Node core
1.3.0 208,405,653 No SLSA provenance attestation
59 mime-db
Media Type Database
1.54.0 208,379,602 No SLSA provenance attestation
60 resolve-from
Resolve the path of a module like `require.resolve()` but from a given path
5.0.0 206,742,176 No SLSA provenance attestation
61 mime-types
The ultimate javascript content-type utility.
3.0.2 203,511,891 No SLSA provenance attestation
62 https-proxy-agent
An HTTP(s) proxy `http.Agent` implementation for HTTPS
9.0.0 202,835,407 Signed with SLSA provenance attestation
63 typescript
TypeScript is a language for application scale JavaScript development
6.0.3 201,164,867 No SLSA provenance attestation
64 yargs-parser
the mighty option parser used by yargs
22.0.0 200,989,127 No SLSA provenance attestation
65 acorn
ECMAScript parser
8.16.0 200,309,888 No SLSA provenance attestation
66 @jridgewell/trace-mapping
Trace the original position through a source map
0.3.31 199,539,688 No SLSA provenance attestation
67 agent-base
Turn a function into an `http.Agent` instance
9.0.0 199,075,778 Signed with SLSA provenance attestation
68 entities
Encode & decode XML and HTML entities with ease & speed
8.0.0 198,317,582 Signed with SLSA provenance attestation
69 yargs
yargs the modern, pirate-themed, successor to optimist.
18.0.0 196,300,638 No SLSA provenance attestation
70 shebang-regex
Regular expression for matching a shebang line
4.0.0 192,581,814 No SLSA provenance attestation
71 shebang-command
Get the command from a shebang
2.0.0 192,533,887 No SLSA provenance attestation
72 picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
1.1.1 191,366,656 No SLSA provenance attestation
73 pretty-format
Stringify any JavaScript value.
30.4.1 189,097,374 No SLSA provenance attestation
74 js-tokens
Tiny JavaScript tokenizer.
10.0.0 187,922,366 No SLSA provenance attestation
75 @babel/code-frame
Generate errors that contain a code frame that point to source locations.
7.29.7 186,639,952 Signed with SLSA provenance attestation
76 estraverse
ECMAScript JS AST traversal functions
5.3.0 186,282,055 No SLSA provenance attestation
77 json5
JSON for Humans
2.2.3 185,068,457 No SLSA provenance attestation
78 punycode
A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.
2.3.1 182,897,862 No SLSA provenance attestation
79 hasown
A robust, ES3 compatible, "has own property" predicate.
2.0.4 182,883,979 No SLSA provenance attestation
80 path-to-regexp
Express style path to RegExp utility
8.4.2 181,106,102 No SLSA provenance attestation
81 nanoid
A tiny (118 bytes), secure URL-friendly unique string ID generator
5.1.11 181,084,327 No SLSA provenance attestation
82 zod
TypeScript-first schema declaration and validation library with static type inference
4.4.3 180,009,534 Signed with SLSA provenance attestation
83 @types/estree
TypeScript definitions for estree
1.0.9 179,306,056 No SLSA provenance attestation
84 eslint-scope
ECMAScript scope analyzer for ESLint
9.1.2 177,129,659 Signed with SLSA provenance attestation
85 webidl-conversions
Implements the WebIDL algorithms for converting to and from JavaScript values
8.0.1 176,552,858 Signed with SLSA provenance attestation
86 fs-extra
fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.
11.3.5 176,475,307 No SLSA provenance attestation
87 @babel/types
Babel Types is a Lodash-esque utility library for AST nodes
7.29.7 175,380,231 Signed with SLSA provenance attestation
88 strip-json-comments
Strip comments from JSON. Lets you use comments in your JSON files!
5.0.3 174,420,943 No SLSA provenance attestation
89 get-stream
Get a stream as a string, Buffer, ArrayBuffer or array
9.0.1 174,101,392 No SLSA provenance attestation
90 chokidar
Minimal and efficient cross-platform file watching library
5.0.0 173,416,264 Signed with SLSA provenance attestation
91 @babel/parser
A JavaScript parser
7.29.7 171,918,304 Signed with SLSA provenance attestation
92 convert-source-map
Converts a source-map from/to different formats and allows adding/changing properties.
2.0.0 171,514,443 No SLSA provenance attestation
93 graceful-fs
A drop-in replacement for fs, making various improvements.
4.2.11 170,209,766 No SLSA provenance attestation
94 function-bind
Implementation of Function.prototype.bind
1.1.2 169,504,068 No SLSA provenance attestation
95 cross-spawn
Cross platform child_process#spawn and child_process#spawnSync
7.0.6 167,732,716 No SLSA provenance attestation
96 whatwg-url
An implementation of the WHATWG URL Standard's URL API and parsing machinery
16.0.1 164,924,034 Signed with SLSA provenance attestation
97 negotiator
HTTP content negotiation
1.0.0 164,826,063 No SLSA provenance attestation
98 @jridgewell/sourcemap-codec
Encode/decode sourcemap mappings
1.5.5 164,545,144 No SLSA provenance attestation
99 inherits
Browser-friendly inheritance fully compatible with standard node.js inherits()
2.0.4 164,385,459 No SLSA provenance attestation
100 @babel/helper-validator-identifier
Validate identifier/keywords name
7.29.7 163,816,768 Signed with SLSA provenance attestation