{"package":"@verdaccio/canary","ecosystem":"npm","latest_version":"6.5.2-canary.889e8de","description":"A lightweight private npm proxy registry","license":"MIT","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"https://verdaccio.org","repository":"https://github.com/verdaccio/verdaccio","downloads_weekly":526,"health":{"score":70,"risk":"moderate","breakdown":{"maintenance":15,"popularity":3,"security":25,"maturity":15,"community":12},"deprecated":false,"max_score":100},"vulnerabilities":{"count":0,"critical":0,"high":0,"medium":0,"low":0,"details":[]},"versions":{"latest":"6.5.2-canary.889e8de","total_count":78,"recent":["6.9.2-canary.a6e1dff","6.9.2-canary.3c8f391","6.9.2-canary.ebc08ba","6.9.3-canary.3cb5a48","6.9.3-canary.51c2733","6.10.0-canary.dfe2439","6.10.0-canary.7805d50","6.10.0-canary.c84070b","6.10.0-canary.90d5c20","6.10.0-canary.f82cd04","6.10.0-canary.1cd7034","6.10.1-canary.e3bf392","6.10.1-canary.ca00ee0","6.10.1-canary.6d972d1","6.10.1-canary.d94ebff","6.10.1-canary.d4b8199","6.10.2-canary.dc1adc6","6.10.2-canary.98b58ef","6.10.3-canary.c664334","6.10.3-canary.e2602b3"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":4,"first_published":"2026-04-05T20:48:42.943Z","last_published":"2026-05-10T13:18:23.488Z","dependencies_count":31,"dependencies":["cors","mime","async","debug","lodash","semver","envinfo","express","clipanion","lru-cache","JSONStream","compression","@verdaccio/url","@verdaccio/auth","@verdaccio/core","verdaccio-audit","@cypress/request","@verdaccio/hooks","@verdaccio/utils","@verdaccio/config","@verdaccio/logger","@verdaccio/loaders","@verdaccio/streams","@verdaccio/tarball","verdaccio-htpasswd","@verdaccio/ui-theme","@verdaccio/signature","@verdaccio/middleware","@verdaccio/package-filter","@verdaccio/search-indexer","@verdaccio/local-storage-legacy"]},"github_stats":{"stars":17628,"forks":1463,"open_issues":38,"is_archived":false,"pushed_at":"2026-05-01T13:42:05+00:00"},"bundle":null,"typescript":{"score":10,"has_types":true,"types_source":"bundled","types_package":null},"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"6.5.2-canary.889e8de","version_hint":null,"summary":"@verdaccio/canary@6.5.2-canary.889e8de is safe to use (health: 70/100)"},"version_scoped":null,"_meta":{"endpoint":"check","tier":"full","philosophy":"DepScope is free. Use the cheapest endpoint that answers your real question.","cheaper_alternatives":[{"endpoint":"/api/exists/npm/%40verdaccio%2Fcanary","tokens_estimated":12,"use_when":"you only need to know if the package exists (hallucination guard)"},{"endpoint":"/api/health/npm/%40verdaccio%2Fcanary","tokens_estimated":80,"use_when":"you only need a 0-100 score for go/no-go (>=70 = safe)"},{"endpoint":"/api/prompt/npm/%40verdaccio%2Fcanary","tokens_estimated":280,"use_when":"you want a plain-text LLM-friendly brief instead of JSON"},{"endpoint":"POST /api/check_bulk","tokens_estimated":60,"use_when":"you have 5+ packages to check; sends one round-trip instead of N"}],"docs":"https://depscope.dev/integrate","hint_bulk":"You've called /api/check 65 times in 60s. Save bandwidth + tokens with POST /api/check_bulk (1 round-trip for N pkgs)."},"requested_version":null,"_cache":"hit","_response_ms":11,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"co_used_with":[{"package":"@eskalacja/tmp-repro-dynamic-imports-meta","occurrences":7}],"version_history_summary":{"total_versions":21,"first_release_age_days":164,"last_release_days_ago":129,"avg_days_between_releases":8,"release_velocity":"moderate"}}