1. Conduid
  2. Developer Tools
  3. Npm Top Provenance
MCP server · Developer Tools

Npm Top Provenance

by · github.com/sxzz/npm-top-provenance

Provenance of High Impact on npm

Unclaimed MIT last commit 6 months ago devtools
InstallView source
64Good

Scored 3 months ago · breakdown

About Npm Top Provenance

Npm Top Provenance is an MCP server published by sxzz in the Developer Tools category: provenance of High Impact on npm. It has been installed 0 times through Conduid.

The repository has 28 stars and 1 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx npm-top-provenance

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Npm Top Provenance

Powered by Claude · Grounded in docs

I know everything about Npm Top Provenance. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

Provenance of High Impact on npm

This repository stores the provenance status of high-impact npm packages. The package list is sourced from wooorm/npm-high-impact.

The results are generated by checking the provenance information for each package and are saved in results.json.

Results

Generated time: 2026-05-08T00:44:25.376Z

Total packages: 14899

Full results in results.json

Trusted

Package Downloads
semver
emoji-regex
uuid
which
eslint-visitor-keys
agent-base
webidl-conversions
eslint-scope
@babel/types
entities
whatwg-url
chokidar
undici-types
https-proxy-agent
@babel/parser
readdirp
@babel/helper-validator-identifier
ci-info
@babel/generator
electron-to-chromium
@babel/traverse
@babel/runtime
caniuse-lite
@babel/template
http-proxy-agent
@babel/core
ini
espree
esbuild
axios
@babel/code-frame
@rollup/rollup-linux-x64-musl
@babel/helper-module-imports
@babel/helper-plugin-utils
@babel/helper-module-transforms
fastq
json-parse-even-better-errors
write-file-atomic
magic-string
hosted-git-info
@babel/helpers
@babel/compat-data
@esbuild/linux-x64
tough-cookie
@babel/helper-compilation-targets
@eslint/eslintrc
@typescript-eslint/typescript-estree
@typescript-eslint/types
prettier
@typescript-eslint/visitor-keys
detect-libc View
domhandler View
domutils View
@sinclair/typebox View
dom-serializer View
@typescript-eslint/scope-manager View
zod View
@eslint-community/regexpp View
@eslint-community/eslint-utils View
@img/sharp-linuxmusl-x64 View
tapable View
@tailwindcss/oxide-linux-x64-musl View
mute-stream View
enhanced-resolve View
domelementtype View
rollup View
@opentelemetry/semantic-conventions View
mdn-data View
bl View
@opentelemetry/core View
serialize-javascript View
htmlparser2 View
@typescript-eslint/utils View
whatwg-mimetype View
ts-api-utils View
webpack-sources View
@babel/plugin-syntax-jsx View
vite View
nopt View
@babel/helper-member-expression-to-functions View
@istanbuljs/schema View
css-select View
@typescript-eslint/parser View
@babel/plugin-syntax-typescript View
css-what View
@babel/helper-replace-supers View
jsdom View
@rollup/rollup-linux-x64-gnu View
through2 View
nth-check View
tinyglobby View
abbrev View
dom-accessibility-api View
data-urls View
@typescript-eslint/eslint-plugin View
@babel/helper-create-class-features-plugin View
cssstyle View
pnpm View
node-addon-api View
webpack View
socks-proxy-agent View
@tootallnate/once View
cacache View
@babel/plugin-syntax-import-attributes View
ssri View
@opentelemetry/api-logs View
@babel/plugin-transform-modules-commonjs View
data-uri-to-buffer View
@eslint/core View
html-encoding-sniffer View
@typescript-eslint/type-utils View
baseline-browser-mapping View
@babel/plugin-transform-destructuring View
@babel/helper-create-regexp-features-plugin View
@babel/plugin-transform-classes View
boolbase View
@babel/plugin-transform-spread View
chai View
@babel/plugin-transform-block-scoping View
@eslint/plugin-kit View
@babel/plugin-transform-async-to-generator View
@opentelemetry/instrumentation View
tailwindcss View
@img/sharp-libvips-linuxmusl-x64 View
@babel/plugin-transform-modules-systemjs View
get-tsconfig View
pure-rand View
tinyexec View
dayjs View
@vitest/utils View
@babel/helper-wrap-function View
@babel/plugin-transform-computed-properties View
immutable View
@babel/plugin-transform-exponentiation-operator View
@babel/plugin-transform-named-capturing-groups-regex View
@floating-ui/dom View
@swc/helpers View
@babel/plugin-transform-regenerator View
@babel/preset-env View
@babel/plugin-transform-dotall-regex View
@opentelemetry/resources View
@typescript-eslint/tsconfig-utils View
@typescript-eslint/project-service View
unique-slug View
proc-log View
@babel/plugin-syntax-import-assertions View
undici View
@floating-ui/core View
@emnapi/runtime View
make-fetch-happen View
@vitest/pretty-format View
check-error View
unique-filename View
axe-core View
@npmcli/fs View
@eslint/object-schema View
@babel/plugin-transform-private-methods View
@eslint/config-array View
@babel/plugin-transform-object-rest-spread View
@babel/plugin-transform-class-properties View
@opentelemetry/sdk-trace-base View
@babel/plugin-transform-typescript View
@babel/plugin-transform-optional-chaining View
@napi-rs/wasm-runtime View
@vitest/spy View
@babel/plugin-transform-private-property-in-object View
@vitest/expect View
@babel/plugin-transform-logical-assignment-operators View
minipass-fetch View
memfs View
synckit View
@floating-ui/react-dom View
@babel/plugin-transform-numeric-separator View
@babel/plugin-transform-nullish-coalescing-operator View
@opentelemetry/api View
jose View
validate-npm-package-name View
@babel/plugin-transform-async-generator-functions View
@eslint/config-helpers View
@babel/preset-typescript View
@babel/plugin-transform-optional-catch-binding View
@babel/plugin-transform-unicode-property-regex View
npm-package-arg View
eslint-plugin-prettier View
@floating-ui/utils View
@graphql-tools/utils View
@babel/plugin-transform-unicode-sets-regex View
graphql View
@babel/plugin-transform-class-static-block View
webpack-dev-middleware View
@babel/plugin-transform-react-jsx View
@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly View
@emnapi/core View
@babel/plugin-transform-json-strings View
http-proxy-middleware View
sharp View
bowser View
node-gyp View
ts-jest View
tinyspy View
@babel/plugin-bugfix-firefox-class-in-computed-class-key View
react-router-dom View
tldts-core View
@babel/plugin-transform-runtime View
@vitest/snapshot View
import-in-the-middle View
marked View
@vitest/runner View
@testing-library/react View
npm-normalize-package-bin View
immer View
sass View
@noble/hashes View
vitest View
typescript-eslint View
@babel/preset-react View
@img/sharp-linux-x64 View
b4a View
unplugin View
@octokit/endpoint View
validator View
@vitest/mocker View
@emnapi/wasi-threads View
@octokit/request View
cac View
upath View
require-in-the-middle View
@babel/plugin-transform-duplicate-named-capturing-groups-regex View
@img/sharp-libvips-linux-x64 View
get-uri View
napi-postinstall View
vite-node View
proxy-agent View
@rolldown/pluginutils View
d3-format View
pino View
@vitejs/plugin-react View
pac-resolver View
exponential-backoff View
pac-proxy-agent View
degenerator View
tldts View
tinybench View
tinypool View
@babel/plugin-transform-regexp-modifiers View
@opentelemetry/sdk-metrics View
lint-staged View
@swc/core View
postcss-discard-duplicates View
postcss-merge-rules View
postcss-minify-selectors View
tailwind-merge View
postcss-discard-empty View
postcss-minify-params View
lucide-react View
@babel/plugin-syntax-flow View
postcss-discard-comments View
postcss-normalize-charset View
@vue/shared View
postcss-minify-gradients View
postcss-normalize-url View
postcss-minify-font-values View
eslint-plugin-jest View
stylehacks View
cssnano View
postcss-normalize-unicode View
@swc/core-linux-x64-gnu View
postcss-merge-longhand View
devtools-protocol View
@opentelemetry/context-async-hooks View
postcss-unique-selectors View
postcss-colormin View
postcss-normalize-whitespace View
postcss-reduce-transforms View
postcss-reduce-initial View
postcss-convert-values View
postcss-svgo View
postcss-discard-overridden View
@tanstack/query-core View
@babel/plugin-syntax-decorators View
strip-literal View
postcss-normalize-string View
postcss-normalize-positions View
zustand View
postcss-ordered-values View
set-cookie-parser View
postcss-normalize-repeat-style View
cssnano-preset-default View
@vue/compiler-core View
@npmcli/agent View
postcss-normalize-display-values View
node-abi View
@tanstack/react-query View
postcss-normalize-timing-functions View
@graphql-tools/merge View
@babel/plugin-proposal-decorators View
npm-pick-manifest View
@graphql-tools/schema View
playwright-core View
@opentelemetry/sdk-logs View
@vue/compiler-dom View
@vue/compiler-sfc View
npm-packlist View
socket.io-parser View
npm-bundled View
react-router View
@npmcli/promise-spawn View
eventsource-parser View
@esbuild/linux-arm64 View
@opentelemetry/otlp-transformer View
npm-install-checks View
@vue/compiler-ssr View
@opentelemetry/otlp-exporter-base View
playwright View
tabbable View
@swc/core-linux-x64-musl View
magicast View
@npmcli/git View
@formatjs/intl-localematcher View
@faker-js/faker View
ts-loader View
webpack-cli View
cssnano-utils View
@opentelemetry/instrumentation-http View
puppeteer-core View
express-rate-limit View
bare-fs View
npm-registry-fetch View
@babel/plugin-transform-explicit-resource-management View
nodemon View
@noble/curves View
@mui/utils View
@remix-run/router View
@tailwindcss/oxide View
@tailwindcss/node View
@esbuild/darwin-arm64 View
local-pkg View
@aws/lambda-invoke-store View
engine.io View
@esbuild/win32-x64 View
socket.io View
@babel/eslint-parser View
pacote View
@formatjs/ecma402-abstract View
@opentelemetry/instrumentation-express View
@npmcli/run-script View
bare-stream View
bare-os View
@npmcli/package-json View
@opentelemetry/instrumentation-pg View
less View
@opentelemetry/instrumentation-mongodb View
@esbuild/darwin-x64 View
socket.io-adapter View
@mui/types View
@babel/runtime-corejs3 View
isbinaryfile View
@opentelemetry/instrumentation-mongoose View
@opentelemetry/redis-common View
@rollup/plugin-commonjs View
@puppeteer/browsers View
@turf/helpers View
webpack-bundle-analyzer View
@opentelemetry/instrumentation-hapi View
@tailwindcss/oxide-linux-x64-gnu View
@apidevtools/json-schema-ref-parser View
@npmcli/node-gyp View
@vitest/coverage-v8 View
@esbuild/linux-loong64 View
@mswjs/interceptors View
@opentelemetry/instrumentation-knex View
@formatjs/icu-messageformat-parser View
@opentelemetry/instrumentation-mysql View
@next/env View
@esbuild/win32-arm64 View
csv-parse View
@formatjs/icu-skeleton-parser View
@opentelemetry/instrumentation-fs View
@esbuild/openbsd-x64 View
@esbuild/win32-ia32 View
@esbuild/linux-ppc64 View
@esbuild/netbsd-x64 View
@opentelemetry/instrumentation-ioredis View
@npmcli/installed-package-contents View
react-docgen View
@opentelemetry/instrumentation-graphql View
@opentelemetry/instrumentation-connect View
@esbuild/linux-arm View
@esbuild/android-arm64 View
@esbuild/linux-riscv64 View
styled-components View
intl-messageformat View
next View
@opentelemetry/instrumentation-tedious View
@opentelemetry/instrumentation-koa View
@opentelemetry/instrumentation-mysql2 View
@opentelemetry/instrumentation-lru-memoizer View
@esbuild/freebsd-x64 View
jsdoc-type-pratt-parser View
@opentelemetry/instrumentation-generic-pool View
@esbuild/linux-mips64el View
@esbuild/freebsd-arm64 View
@reduxjs/toolkit View
vue View
chromium-bidi View
openai View
eslint-plugin-react-refresh View
@opentelemetry/instrumentation-amqplib View
@babel/register View
@esbuild/linux-ia32 View
@formatjs/fast-memoize View
@esbuild/android-arm View
@esbuild/linux-s390x View
zod-validation-error View
simple-git View
eslint-plugin-testing-library View
nodemailer View
@opentelemetry/sdk-trace-node View
msw View
@esbuild/android-x64 View
@esbuild/sunos-x64 View
@mui/system View
@sigstore/protobuf-specs View
@opentelemetry/exporter-trace-otlp-http View
pkce-challenge View
@next/swc-linux-x64-gnu View
@prisma/engines-version View
@floating-ui/react View
socket.io-client View
tuf-js View
@sigstore/tuf View
@ts-morph/common View
read-package-json-fast View
@opentelemetry/propagator-b3 View
@opentelemetry/sql-common View
@mui/private-theming View
@sigstore/bundle View
sigstore View
fast-check View
@opentelemetry/propagator-jaeger View
engine.io-client View
@ai-sdk/provider-utils View
@mui/material View
@sigstore/sign View
@playwright/test View
@opentelemetry/instrumentation-dataloader View
@opentelemetry/instrumentation-undici View
@mui/styled-engine View
read View
@tufjs/models View
@vue/server-renderer View
stylelint View
puppeteer View
ts-morph View
turbo View
@vue/reactivity View
@graphql-tools/relay-operation-optimizer View
@next/swc-linux-x64-musl View
@opentelemetry/instrumentation-kafkajs View
@supabase/storage-js View
@supabase/postgrest-js View
@supabase/functions-js View
@open-draft/deferred-promise View
effect View
react-dropzone View
@vue/runtime-dom View
editorconfig View
@module-federation/sdk View
@nx/devkit View
@rollup/plugin-babel View
headers-polyfill View
@supabase/auth-js View
@sec-ant/readable-stream View
@vue/runtime-core View
@storybook/icons View
@esbuild/aix-ppc64 View
@actions/http-client View
@next/eslint-plugin-next View
cosmiconfig-typescript-loader View
@supabase/realtime-js View
@mui/core-downloads-tracker View
metro-source-map View
stylelint-config-recommended View
react-day-picker View
@tanstack/react-virtual View
@tailwindcss/postcss View
eslint-plugin-promise View
@supabase/supabase-js <a href="http://npmcharts

README mirrored from the source repository 3 months ago. The original is authoritative.

Questions

About Npm Top Provenance

How do I install Npm Top Provenance?

Run npx npm-top-provenance, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Npm Top Provenance safe to use with an AI agent?

Its trust score is 64 out of 100 (good). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Npm Top Provenance still maintained?

The last commit was 6 months ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.