npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of vercel, generated . This is a read-only snapshot.
Run your own audit →

Audit of vercel

Re-run this audit
Tracking daily next

Progress over time

Strong trust
19.2% (34) staged or trusted
Any trust
20.9% (37) incl. provenance
No trust signal
79.1% (140) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/248/258/268/29
  1. ...
    37/177 any trust
  2. 37/176 any trust
  3. 37/176 any trust
  4. 37/176 any trust
  5. 37/176 any trust
  6. [viewing]
    36/176 any trust
In scope
176
Staged publish
0
Trusted publisher
33
Provenance only
3
No trust signal
140
Deprecated latest
8
176 packages · click a column to sort
Package trust level report
ai7.0.78trusted publisherGitHub Actions22,395,585—
@vercel/sdk1.28.22trusted publisherGitHub Actions417,206—
@vercel/agent-eval2.2.0trusted publisherGitHub Actions103,412—
streamdown2.6.0trusted publisherGitHub Actions5,975,960—
satori0.33.4trusted publisherGitHub Actions3,519,962—
@vercel/geistdocs1.23.0noneGitHub Actions23,071—
vercel59.5.0noneGitHub Actions3,768,730—
@vercel/hydrogen3.0.0noneGitHub Actions3,552,993—
@vercel/fastify2.0.0noneGitHub Actions3,237,519—
@vercel/node7.0.0noneGitHub Actions4,346,875—
@vercel/go5.0.0noneGitHub Actions3,533,150—
@vercel/nestjs2.0.0noneGitHub Actions3,228,167—
@vercel/next6.0.0noneGitHub Actions3,695,872—
@vercel/koa2.0.0noneGitHub Actions3,111,789—
@vercel/hono2.0.0noneGitHub Actions3,361,698—
@vercel/h32.0.0noneGitHub Actions3,266,887—
@vercel/express2.0.0noneGitHub Actions3,346,053—
@vercel/elysia2.0.0noneGitHub Actions3,235,840—
@vercel/static-build4.0.0noneGitHub Actions3,632,834—
@vercel/rust3.0.0noneGitHub Actions3,199,099—
@vercel/backends2.0.0noneGitHub Actions3,243,149—
@vercel/build-utils14.4.0noneGitHub Actions4,712,958—
@vercel/cervel0.1.49noneGitHub Actions3,258,765—
@vercel/ruby4.0.0noneGitHub Actions3,431,637—
@vercel/remix-builder7.0.0noneGitHub Actions3,555,256—
@vercel/redwood4.0.0noneGitHub Actions3,563,933—
@vercel/python8.0.0noneGitHub Actions3,639,042—
@vercel/gatsby-plugin-vercel-builder2.2.44noneGitHub Actions3,622,188—
@vercel/container2.0.0noneGitHub Actions2,056,696—
@vercel/fs-detectors7.0.1noneGitHub Actions233,972—
@vercel/connect1.0.0noneGitHub Actions311,949—
@vercel/client18.2.16noneGitHub Actions44,330—
@vercel/vc-native-linux-x6459.5.0noneGitHub Actions1,369,729—
@vercel/vc-native59.5.0noneGitHub Actions1,670—
@vercel/vc-native-linux-arm6459.5.0noneGitHub Actions114,678—
@vercel/vc-native-darwin-x6459.5.0noneGitHub Actions84,427—
@vercel/vc-native-darwin-arm6459.5.0noneGitHub Actions284,179—
libfx0.0.5trusted publisherGitHub Actions6,464—
next16.3.2trusted publisherGitHub Actions53,124,535—
sandbox4.1.0trusted publisherGitHub Actions2,890,067—
@vercel/sandbox3.1.0trusted publisherGitHub Actions4,191,083—
@vercel/sandbox-mock3.1.0trusted publisherGitHub Actions9,677—
@vercel/agent-readability0.6.0noneGitHub Actions57,532—
@vercel/oidc3.8.5noneGitHub Actions27,562,714—
@vercel/cli-config0.2.4noneGitHub Actions6,401,957—
@vercel/cli-auth0.3.5noneGitHub Actions3,070,024—
@vercel/python-analysis0.14.0noneGitHub Actions3,664,461—
@vercel/functions3.9.5noneGitHub Actions5,949,180—
@vercel/aws0.2.12noneGitHub Actions231—
@vercel/oidc-aws-credentials-provider3.3.5noneGitHub Actions226,925—
@vercel/kms0.1.1noneGitHub Actions447—
@vercel/frameworks3.32.0noneGitHub Actions729,291—
workflow4.8.4trusted publisherGitHub Actions945,925—
@vercel/queue0.5.0noneGitHub Actions1,241,279—
@vercel/webpack-asset-relocator-loader1.11.0trusted publisherGitHub Actions318,432—
@vercel/nft1.11.0trusted publisherGitHub Actions8,759,879—
remote-components0.4.15noneGitHub Actions22,088—
@vercel/react-router1.3.4noneGitHub Actions116,855—
@vercel/slack-bolt1.6.3trusted publisherGitHub Actions43,517—
mcp-handler2.1.1trusted publisherGitHub Actions886,322—
@vercel/routing-utils6.5.0noneGitHub Actions1,081,768—
@vercel/config0.6.1noneGitHub Actions314,675—
run2.0.0noneGitHub Actions73,239—
@vercel/ncc0.45.0trusted publisherGitHub Actions998,417—
@vercel/edge1.3.3noneGitHub Actions701,302—
@vercel/detect-agent1.2.5noneGitHub Actions3,445,884—
@vercel/firewall1.2.5noneGitHub Actions129,513—
agent-browser0.34.0trusted publisherGitHub Actions1,098,199—
@vercel/blob2.8.0trusted publisherGitHub Actions6,195,596—
@vercel/og1.0.1noneGitHub Actions2,033,013—
create-v0-sdk-app3.0.4trusted publisherGitHub Actions283—
v03.0.4trusted publisherGitHub Actions8,969—
@vercel/edge-config1.5.1trusted publisherGitHub Actions1,048,437—
@vercel/global-config1.5.1trusted publisherGitHub Actions441,560—
@vercel/global-config-fs0.1.0noneandybitz181,306—
flags4.3.0trusted publisherGitHub Actions1,344,272—
@vercel/static-config3.4.1noneGitHub Actions4,196,996—
@vercel/related-projects1.1.1noneGitHub Actions71,802—
@vercel/passport1.0.1noneGitHub Actions18,678—
@vercel/gatsby-plugin-vercel-analytics1.0.12noneGitHub Actions3,355,801—
@vercel/error-utils2.2.1noneGitHub Actions4,611,142—
@vercel/cli-exec1.0.1noneGitHub Actions5,277,803—
v0-sdk0.16.7trusted publisherGitHub Actions35,489—
@vercel/vc-native-win32-x6458.4.0trusted publisherGitHub Actions547—
@vercel/flags-core1.7.1trusted publisherGitHub Actions470,236—
@vercel/toolbar0.2.7noneGitHub Actions496,058—
@vercel/microfrontends2.4.0trusted publisherGitHub Actions945,118—
@vercel/prepare-flags-definitions0.4.0trusted publisherGitHub Actions2,964,627—
@vercel/error0.0.2noneGitHub Actions6—
@vercel/otel2.1.3trusted publisherGitHub Actions2,111,324—
experimental-ash0.64.1noneGitHub Actions3,049—
create-experimental-ash-agent0.7.0noneGitHub Actions2—
next-forge6.0.3trusted publisherGitHub Actions455—
@vercel/vclaw0.3.10trusted publisherGitHub Actions6—
mixpart0.0.6noneGitHub Actions1,902,815—
@vercel/connex0.0.11noneGitHub Actions5—
@vercel/next-browser0.7.1nonejudegao21,746—
@vercel/ai-sdk-openai-websocket-fetch1.0.0nonevercel-release-bot4,959—
@vercel/stega1.1.0nonevercel-release-bot2,476,409—
@vercel/analytics2.0.1nonevercel-release-bot5,747,473—
ai-elements1.9.0trusted publisherGitHub Actions88,388—
@vercel/fun1.3.1nonevercel-release-bot3,484,491—
@vercel/speed-insights2.0.0nonevercel-release-bot3,775,525—
@vercel/cosmosdb-server1.0.1nonevercel-release-bot163,216—
botid1.5.11nonevercel-release-bot620,406—
@vercel/nextdocfs0.5.1nonejudegao2—
@vercel/kv20.0.19nonecramforce170—
@vercel/dream0.4.0noneGitHub Actions3—
@vercel/beautiful-mermaid0.1.5nonejohnphamous6,184—
@vercel/mcp-adapter0.3.2provenancevercel-release-bot79,948—
@vercel/create-dream0.2.2noneadriancooney_vercel1—
@vercel/dream-init0.2.2noneadriancooney_vercel1—
@vercel/agent-eval-playground0.1.3trusted publisherGitHub Actions1,499—
@vercel/introspection0.0.13provenancevercel-release-bot158,539—
@vercel/v00.0.1-alpha.1nonefernandorojo3—
@vercel/before-and-after0.0.4nonejamesvclements2,617—
@vercel/sandbox-cli1.1.1nonevercel-release-bot5,960DEPRECATED
@vercel/examples-ui2.0.4nonevercel-release-bot947—
react-chatgpt-hooks0.0.1nonequuu1—
@vercel/platforms1.0.0nonehaydenbleasel9—
@vercel/ade0.0.24nonerobpruzan3—
mcp-to-ai-sdk0.1.1nonevercel-release-bot136—
@vercel/remix-run-dev2.16.7nonevercel-release-bot5,371—
@vercel/remix2.16.7nonevercel-release-bot42,775—
@vercel/repository-dispatch-status0.0.1nonevercel-release-bot3—
@vercel/repository-dispatch-checkout0.0.1nonevercel-release-bot3—
@vercel/ai-sdk-gateway0.1.10nonevercel-release-bot70DEPRECATED
@vercel/repository-dispatch0.1.0nonevercel-release-bot8—
@vercel/flags3.1.1nonevercel-release-bot223,761DEPRECATED
@vercel/sqs-consumer5.7.0nonemglagola14—
@vercel/devlow-bench0.3.5provenancevercel-release-bot2,379—
@vercel/kv3.0.0nonevercel-release-bot419,183DEPRECATED
@vercel/postgres-kysely0.10.0nonevercel-release-bot3,910DEPRECATED
@vercel/postgres0.10.0nonevercel-release-bot387,105DEPRECATED
@vercel/style-guide6.0.0nonevercel-release-bot331,540—
@vercel/remote-nx2.0.0nonevercel-release-bot14,962—
@vercel/fetch7.0.0nonevercel-release-bot380,708—
@vercel/visual-editing0.0.1nonevercel-release-bot1—
@vercel/ai-utils0.0.2nonejaredpalmer33—
@vercel/edge-config-fs0.1.0nonevercel-release-bot849,736—
@vercel/remix-entry-server0.1.1nonevercel-release-bot253—
@vercel/node-bridge4.0.1nonevercel-release-bot38,181—
@vercel/algolite0.3.0-canary.1noneofhouse3—
@vercel/experimental-nft-next-plugin0.0.1nonevercel-release-bot9—
@vercel/fetch-cached-dns2.1.2nonevercel-release-bot277,128—
@vercel/remote-rush1.0.1nonevercel-release-bot146,727—
@vercel/remote1.0.1nonevercel-release-bot179,164—
@vercel/webpack-nft0.0.14nonevercel-release-bot8—
@vercel/nft-next-plugin0.0.13nonevercel-release-bot1—
@vercel/experimental-nft0.0.4nonevercel-release-bot9—
@vercel/experimental-nft-win32-x640.0.4nonevercel-release-bot10—
@vercel/experimental-nft-darwin-arm640.0.4nonevercel-release-bot12—
@vercel/experimental-nft-darwin-x640.0.4nonevercel-release-bot9—
@vercel/experimental-nft-linux-x640.0.4nonevercel-release-bot9—
@vercel/wireguard0.0.7noneemeraldsanto5—
@vercel/examples-ui-svelte0.1.16nonegbibeaulaviolette1—
@vercel/satori-node0.0.22nonestyfle3—
@vercel/satori-core0.0.22nonestyfle5—
@vercel/edge-jest-environment0.12.4nonekikobeats3—
@vercel/edge-runtime0.12.4nonekikobeats33DEPRECATED
@vercel/edge-vm0.12.4nonekikobeats38—
@vercel/edge-types0.12.4nonekikobeats1—
@vercel/edge-primitives0.12.4nonekikobeats51—
@vercel/edge-format0.12.2nonekikobeats43—
@vercel/format0.11.0nonekikobeats3—
@vercel/fetch-retry5.1.3noneethan_arrowood288,274—
@vercel/mdx-deck-theme0.3.1nonedav-is2—
@vercel/edge-functions-ui0.2.1nonelfades2,568—
async-sema3.1.1noneleerobinson8,907,217—
@vercel/tracing-js0.5.1nonestyfle45DEPRECATED
@vercel/git-hooks1.0.0noneleerobinson12,465—
@vercel/cgi1.0.7nonezeit-bot1—
@vercel/docs-generator0.2.0nonequietshu4—
@vercel/integration-utils0.6.5-canary.0nonetootallnate6—
vercel-client1.0.0noneleo2—
vc0.1.4nonelepture637—