Package Security & Trust
Trust scores for npm, PyPI, and other packages. Updated 2026-05-06.
| # | Package | Trust | Grade | Stars | Downloads | Language |
|---|---|---|---|---|---|---|
| 1 | chalk | 45 | D+ | - | 1,713,138,879 | - |
| 2 | ansi-regex | 45 | D | - | 1,460,638,496 | - |
| 3 | commander | 47 | D+ | - | 1,186,147,128 | - |
| 4 | has-flag | 46 | D+ | - | 1,046,803,862 | - |
| 5 | argparse | 47 | D+ | - | 628,939,615 | - |
| 6 | yargs | 47 | D+ | - | 601,399,964 | - |
| 7 | postcss | 41 | D | - | 576,785,121 | - |
| 8 | cliui | 47 | D+ | - | 566,663,666 | - |
| 9 | npm-run-path | 47 | D+ | - | 496,302,466 | - |
| 10 | jsesc | 49 | D+ | - | 431,357,871 | - |
| 11 | browserslist | 48 | D+ | - | 420,635,895 | - |
| 12 | mime | 43 | D | - | 393,287,010 | - |
| 13 | @babel/compat-data | 51 | C- | - | 367,503,960 | - |
| 14 | axios | 42 | D | - | 360,150,618 | - |
| 15 | arg | 44 | D | - | 359,437,529 | - |
| 16 | ansi-escapes | 46 | D+ | - | 357,213,738 | - |
| 17 | @babel/helper-plugin-utils | 50 | D+ | - | 332,842,740 | - |
| 18 | jackspeak | 46 | D+ | - | 330,092,160 | - |
| 19 | @babel/helper-validator-option | 50 | D+ | - | 328,226,658 | - |
| 20 | optionator | 46 | D+ | - | 326,969,539 | - |
| 21 | restore-cursor | 46 | D+ | - | 319,421,625 | - |
| 22 | esutils | 46 | D+ | - | 315,869,746 | - |
| 23 | @eslint/js | 46 | D+ | - | 311,901,881 | - |
| 24 | cli-cursor | 46 | D+ | - | 310,196,953 | - |
| 25 | @typescript-eslint/eslint-plugin | 46 | D+ | - | 303,816,533 | - |
| 26 | slice-ansi | 45 | D+ | - | 302,396,343 | - |
| 27 | follow-redirects | 40 | D | - | 301,998,452 | - |
| 28 | rxjs | 44 | D | - | 301,513,006 | - |
| 29 | @eslint-community/eslint-utils | 46 | D+ | - | 280,280,887 | - |
| 30 | binary-extensions | 46 | D+ | - | 268,745,130 | - |
| 31 | tapable | 46 | D+ | - | 267,739,482 | - |
| 32 | log-symbols | 47 | D+ | - | 266,388,394 | - |
| 33 | is-binary-path | 46 | D+ | - | 263,860,790 | - |
| 34 | @isaacs/cliui | 47 | D+ | - | 249,795,761 | - |
| 35 | css-tree | 49 | D+ | - | 228,667,504 | - |
| 36 | ora | 44 | D | - | 223,050,550 | - |
| 37 | fast-uri | 46 | D+ | - | 222,304,200 | - |
| 38 | figures | 47 | D+ | - | 217,504,244 | - |
| 39 | terser | 46 | D+ | - | 204,559,171 | - |
| 40 | @aws-sdk/client-sso | 51 | C- | - | 197,946,681 | - |
| 41 | cli-width | 47 | D+ | - | 197,160,188 | - |
| 42 | cssesc | 49 | D+ | - | 194,802,488 | - |
| 43 | eslint-plugin-react-hooks | 46 | D+ | - | 193,708,939 | - |
| 44 | cli-boxes | 46 | D+ | - | 186,763,633 | - |
| 45 | boxen | 46 | D+ | - | 186,299,531 | - |
| 46 | dir-glob | 46 | D+ | - | 185,430,600 | - |
| 47 | cli-spinners | 46 | D+ | - | 183,089,937 | - |
| 48 | @eslint/plugin-kit | 45 | D | - | 181,962,810 | - |
| 49 | @smithy/smithy-client | 51 | C- | - | 179,526,186 | - |
| 50 | @babel/plugin-syntax-import-attributes | 51 | C- | - | 178,207,223 | - |
| 51 | ansi-align | 46 | D+ | - | 172,755,228 | - |
| 52 | babel-jest | 46 | D+ | - | 172,343,897 | - |
| 53 | babel-plugin-istanbul | 47 | D+ | - | 170,464,533 | - |
| 54 | babel-preset-jest | 49 | D+ | - | 169,453,367 | - |
| 55 | babel-plugin-jest-hoist | 51 | C- | - | 169,428,943 | - |
| 56 | @babel/plugin-transform-modules-commonjs | 50 | D+ | - | 166,997,197 | - |
| 57 | eslint-plugin-import | 44 | D | - | 163,023,244 | - |
| 58 | import-local | 47 | D+ | - | 162,470,088 | - |
| 59 | @floating-ui/dom | 46 | D+ | - | 161,398,021 | - |
| 60 | eslint-module-utils | 47 | D+ | - | 159,298,151 | - |
| 61 | @floating-ui/core | 47 | D+ | - | 158,393,106 | - |
| 62 | autoprefixer | 47 | D+ | - | 156,004,223 | - |
| 63 | make-error | 46 | D+ | - | 155,029,336 | - |
| 64 | jest-cli | 46 | D+ | - | 151,712,818 | - |
| 65 | terser-webpack-plugin | 46 | D+ | - | 150,639,391 | - |
| 66 | babel-plugin-polyfill-corejs3 | 47 | D+ | - | 148,642,312 | - |
| 67 | cli-truncate | 47 | D+ | - | 146,370,445 | - |
| 68 | gaxios | 47 | D+ | - | 145,898,917 | - |
| 69 | @babel/plugin-transform-spread | 50 | D+ | - | 144,955,366 | - |
| 70 | @babel/helper-define-polyfill-provider | 50 | D+ | - | 144,920,938 | - |
| 71 | uglify-js | 46 | D+ | - | 143,172,773 | - |
| 72 | eslint-plugin-react | 46 | D+ | - | 142,114,933 | - |
| 73 | clip-features | 61 | C | - | 140,361,835 | - |
| 74 | @babel/plugin-syntax-import-meta | 50 | D+ | - | 139,616,958 | - |
| 75 | @rollup/pluginutils | 47 | D+ | - | 139,106,885 | - |
| 76 | babel-plugin-polyfill-regenerator | 47 | D+ | - | 138,882,205 | - |
| 77 | @babel/plugin-transform-for-of | 50 | D+ | - | 136,534,880 | - |
| 78 | @babel/plugin-transform-literals | 51 | C- | - | 135,928,470 | - |
| 79 | google-auth-library | 47 | D+ | - | 132,605,124 | - |
| 80 | babel-plugin-polyfill-corejs2 | 47 | D+ | - | 132,439,504 | - |
| 81 | clipboardy | 46 | D+ | - | 132,099,863 | - |
| 82 | @babel/plugin-transform-named-capturing-groups-regex | 49 | D+ | - | 130,766,485 | - |
| 83 | @babel/plugin-transform-object-super | 50 | D+ | - | 130,228,220 | - |
| 84 | meow | 42 | D | - | 129,435,518 | - |
| 85 | @babel/plugin-transform-property-literals | 51 | C- | - | 129,384,140 | - |
| 86 | @babel/plugin-syntax-class-static-block | 50 | D+ | - | 127,487,070 | - |
| 87 | listr2 | 49 | D+ | - | 126,721,963 | - |
| 88 | @graphql-tools/utils | 47 | D+ | - | 126,467,044 | - |
| 89 | log-update | 49 | D+ | - | 125,670,584 | - |
| 90 | @babel/plugin-transform-optional-chaining | 51 | C- | - | 121,968,557 | - |
| 91 | regenerate | 49 | D+ | - | 120,456,681 | - |
| 92 | @babel/plugin-transform-object-rest-spread | 50 | D+ | - | 118,448,799 | - |
| 93 | make-fetch-happen | 46 | D+ | - | 118,270,940 | - |
| 94 | progress | 46 | D+ | - | 117,848,910 | - |
| 95 | @npmcli/fs | 46 | D+ | - | 117,781,030 | - |
| 96 | next | 36 | D- | - | 117,301,202 | - |
| 97 | @adobe/css-tools | 51 | C- | - | 116,607,498 | - |
| 98 | eslint-import-resolver-typescript | 47 | D+ | - | 116,242,327 | - |
| 99 | @babel/plugin-transform-logical-assignment-operators | 49 | D+ | - | 114,146,225 | - |
| 100 | @babel/plugin-transform-private-property-in-object | 51 | C- | - | 113,826,864 | - |