node
node
100
Versions
MIT
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
aredridel
Keywords
runtime
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| bogus-package | bogus-package | AI (bogus-package): This is a legitimate, long-standing Node.js binary wrapper. Tiny payload and minimal description are by design; isaacs spam flag is a false positive for this established package. | ai | |
| typosquat | typosquat.levenshtein:zod | AI (typosquat): 'node' is a long-established (~5000 days) Node.js binary wrapper package with no relation to 'zod'; the Levenshtein match is a false positive that generalizes across all versions. | ai | |
| install-scripts | install-script:preinstall | AI (install-scripts): Preinstall is the documented, stable mechanism for node-bin-gen to select the correct arch-specific Node.js binary. Present across hundreds of versions; not a risk signal for this package. | ai |
Versions (showing 100 of 758)
| Version | Deps | Published |
|---|---|---|
| 18.20.4 | 1 / 0 | |
| 18.20.2 | 1 / 0 | |
| 18.20.1 | 1 / 0 | |
| 18.20.0 | 1 / 0 | |
| 18.19.1 | 1 / 0 | |
| 18.19.0 | 1 / 0 | |
| 18.18.2 | 1 / 0 | |
| 18.18.1 | 1 / 0 | |
| 18.18.0 | 1 / 0 | |
| 18.17.1 | 1 / 0 | |
| 18.17.0 | 1 / 0 | |
| 18.16.1 | 1 / 0 | |
| 18.16.0 | 1 / 0 | |
| 18.15.0 | 1 / 0 | |
| 18.14.2 | 1 / 0 | |
| 18.14.1 | 1 / 0 | |
| 18.14.0 | 1 / 0 | |
| 18.13.0 | 1 / 0 | |
| 18.12.1 | 1 / 0 | |
| 18.12.0 | 1 / 0 | |
| 18.11.0 | 1 / 0 | |
| 18.10.0 | 1 / 0 | |
| 18.9.1 | 1 / 0 | |
| 18.9.0 | 1 / 0 | |
| 18.8.0 | 1 / 0 | |
| 18.7.0 | 1 / 0 | |
| 18.6.0 | 1 / 0 | |
| 18.5.0 | 1 / 0 | |
| 18.4.0 | 1 / 0 | |
| 18.3.0 | 1 / 0 | |
| 18.2.0 | 1 / 0 | |
| 18.1.0 | 1 / 0 | |
| 18.0.0 | 1 / 0 | |
| 17.9.1 | 1 / 0 | |
| 17.7.2 | 1 / 0 | |
| 17.7.1 | 1 / 0 | |
| 17.7.0 | 1 / 0 | |
| 17.6.0 | 1 / 0 | |
| 17.5.0 | 1 / 0 | |
| 17.4.0 | 1 / 0 | |
| 17.3.1 | 1 / 0 | |
| 17.3.0 | 1 / 0 | |
| 17.2.0 | 1 / 0 | |
| 17.1.0 | 1 / 0 | |
| 17.0.1 | 1 / 0 | |
| 17.0.0 | 1 / 0 | |
| 16.20.2 | 1 / 0 | |
| 16.20.1 | 1 / 0 | |
| 16.20.0 | 1 / 0 | |
| 16.19.1 | 1 / 0 | |
| 16.19.0 | 1 / 0 | |
| 16.18.1 | 1 / 0 | |
| 16.18.0 | 1 / 0 | |
| 16.17.1 | 1 / 0 | |
| 16.17.0 | 1 / 0 | |
| 16.16.0 | 1 / 0 | |
| 16.15.1 | 1 / 0 | |
| 16.15.0 | 1 / 0 | |
| 16.14.2 | 1 / 0 | |
| 16.14.1 | 1 / 0 | |
| 16.14.0 | 1 / 0 | |
| 16.13.2 | 1 / 0 | |
| 16.13.1 | 1 / 0 | |
| 16.13.0 | 1 / 0 | |
| 16.12.0 | 1 / 0 | |
| 16.11.1 | 1 / 0 | |
| 16.11.0 | 1 / 0 | |
| 16.10.0 | 1 / 0 | |
| 16.9.1 | 1 / 0 | |
| 16.9.0 | 1 / 0 | |
| 16.8.0 | 1 / 0 | |
| 16.7.0 | 1 / 0 | |
| 16.6.2 | 1 / 0 | |
| 16.6.1 | 1 / 0 | |
| 16.6.0 | 1 / 0 | |
| 16.5.0 | 1 / 0 | |
| 16.4.1 | 1 / 0 | |
| 16.4.0 | 1 / 0 | |
| 16.3.0 | 1 / 0 | |
| 16.1.0 | 1 / 0 | |
| 16.0.0 | 1 / 0 | |
| 15.14.0 | 1 / 0 | |
| 15.12.0 | 1 / 0 | |
| 15.10.0 | 1 / 0 | |
| 15.8.0 | 1 / 0 | |
| 15.7.0 | 1 / 0 | |
| 15.4.0 | 1 / 0 | |
| 15.3.0 | 1 / 0 | |
| 15.2.1 | 1 / 0 | |
| 15.2.0 | 1 / 0 | |
| 15.1.0 | 1 / 0 | |
| 15.0.1 | 1 / 0 | |
| 15.0.0 | 1 / 0 | |
| 14.21.3 | 1 / 0 | |
| 14.21.2 | 1 / 0 | |
| 14.21.0 | 1 / 0 | |
| 14.20.1 | 1 / 0 | |
| 14.20.0 | 1 / 0 | |
| 14.19.3 | 1 / 0 | |
| 14.19.2 | 1 / 0 |
Showing 100 of 758
Next page →
v18.20.4
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.