Skip to content

Estate
Faults
Applications
Maintainers
Trace

⌘K

ProbingChecking the database connection

Estate
Faults
Applications
Maintainers
Trace

Drawing the sheet

Loading

tar

npm registry · package record

Tar archive reader and writer

1.5M downloads / week9 releases5 releases with an advisory

Releases

9

VersionPublishedLicenceAdvisories

6.2.120 Aug 2025MIT—

6.1.814 Jan 2025MITHHigh severityUSY-2026-0114

6.1.518 Mar 2024MITHHigh severityUSY-2026-0114

6.1.39 Jul 2023MITHHigh severityUSY-2026-0114

6.1.010 Oct 2022MITHHigh severityUSY-2026-0114

6.0.028 Mar 2022MITHHigh severityUSY-2026-0114

5.9.611 Jul 2021MIT—

5.9.524 Sep 2020MIT—

5.9.425 Feb 2020MIT—

Publish rights

3 accounts

Arjun Falkarjun-falk · owner2FA on Niamh Rahmanniamh-rahman · publisherNo 2FA Pavel Halvorsenpavel-halvorsen · publisherNo 2FA

Reached from

9 applications

Admin Console2 hops

Pulled in directly by

74 releases

ajv 1.2.0 archiver 4.0.4 axios 1.1.4 axios 1.1.2 chalk 3.4.17 cors 5.7.0 cors 5.7.5 cypress 4.2.5 cypress 4.6.3 d3 1.3.3 dotenv 2.9.4 exceljs 5.3.0 framer-motion 3.8.0 graphql 4.5.0 helmet 6.2.3 helmet 6.2.7 jsonwebtoken

Record

Understory · dependency reach

Sheet

5 of 6 · Package

Traversal bound

8 hops

Instance

bolt+s://db-729ceaca.bravo.databases.cognodb.com

Synthetic dataPackage names and ecosystems are real. The organisation, its applications, its maintainer accounts and every advisory in this graph are invented for the demonstration. No advisory here describes a real published vulnerability.

Auth Gateway2 hops

Checkout Service2 hops

Inventory Sync2 hops

Ledger API2 hops

Storefront Web2 hops

node-fetch›tar

Docs Site3 hops

express›yargs›tar

Mobile BFF3 hops

kafkajs›node-fetch›tar

Notification Relay3 hops

vitest›helmet›tar

9.0.2

node-fetch 3.3.0

node-fetch 3.5.0

node-fetch 3.6.7

passport 2.3.15

puppeteer 6.0.0

+34 more