Vulnerable packages seen across the corpus

Every count here is a floor. A package survives only in a survey's readable list of affected locations, which stops after a fixed number of entries without the count above it changing, so a survey may carry a package without being counted for it. 429 of 6,022 surveys read for advisories had a list cut short that way.

42% of packages this reading could see (641 of 1,515) are not listed, because each was seen in fewer than 3 codebases. Below that a page describes a handful of codebases rather than the packages they carry. They are absent from the list rather than folded into it.

brace-expansion — seen in at least 803
js-yaml — seen in at least 747
minimatch — seen in at least 554
picomatch — seen in at least 536
browserslist — seen in at least 527
postcss — seen in at least 519
qs — seen in at least 516
nanoid — seen in at least 497
ajv — seen in at least 496
uuid — seen in at least 488
@babel/core — seen in at least 462
lodash — seen in at least 442
ws — seen in at least 418
form-data — seen in at least 399
serialize-javascript — seen in at least 356
flatted — seen in at least 352
cross-spawn — seen in at least 338
body-parser — seen in at least 321
tar — seen in at least 320
diff — seen in at least 315
fast-uri — seen in at least 308
braces — seen in at least 305
micromatch — seen in at least 304
follow-redirects — seen in at least 292
path-to-regexp — seen in at least 289
yaml — seen in at least 289
esbuild — seen in at least 270
tmp — seen in at least 263
@babel/helpers — seen in at least 246
vite — seen in at least 242
semver — seen in at least 239
shell-quote — seen in at least 239
baseline-browser-mapping — seen in at least 233
rollup — seen in at least 224
axios — seen in at least 215
@babel/runtime — seen in at least 210
cookie — seen in at least 208
undici — seen in at least 199
websocket-driver — seen in at least 194
svgo — seen in at least 187
anyhow — seen in at least 181
@babel/plugin-transform-modules-systemjs — seen in at least 178
tough-cookie — seen in at least 175
decode-uri-component — seen in at least 171
send — seen in at least 167
ip-address — seen in at least 166
postcss-selector-parser — seen in at least 166
json5 — seen in at least 165
rustls — seen in at least 163
vitest — seen in at least 163
@babel/traverse — seen in at least 160
serve-static — seen in at least 160
glob — seen in at least 159
@tootallnate/once — seen in at least 158
paste — seen in at least 158
node-forge — seen in at least 156
webpack — seen in at least 154
http-proxy-middleware — seen in at least 151
express — seen in at least 149
on-headers — seen in at least 149
webpack-dev-server — seen in at least 148
@vitest/mocker — seen in at least 146
h2 — seen in at least 146
elliptic — seen in at least 144
rand — seen in at least 142
request — seen in at least 142
minimist — seen in at least 136
@humanfs/node — seen in at least 134
ip — seen in at least 131
golang.org/x/crypto — seen in at least 128
handlebars — seen in at least 127
sharp — seen in at least 127
crossbeam-epoch — seen in at least 126
golang.org/x/net — seen in at least 126
image-size — seen in at least 126
bn.js — seen in at least 125
idna — seen in at least 116
ansi-regex — seen in at least 115
immutable — seen in at least 115
sha.js — seen in at least 114
word-wrap — seen in at least 114
colord — seen in at least 111
bincode — seen in at least 110
extract-zip — seen in at least 110
click — seen in at least 109
loader-utils — seen in at least 106
dompurify — seen in at least 105
markdown-it — seen in at least 105
quick-xml — seen in at least 105
debug — seen in at least 104
pytest — seen in at least 104
react-router — seen in at least 99
linkify-it — seen in at least 97
cipher-base — seen in at least 96
pbkdf2 — seen in at least 96
socket.io-parser — seen in at least 92
joi — seen in at least 91
concurrent-ruby — seen in at least 88
plug — seen in at least 88
json-schema — seen in at least 86
rustls-webpki — seen in at least 86
lru — seen in at least 85
event-listener — seen in at least 82
lodash-es — seen in at least 82
urllib3 — seen in at least 82
google.golang.org/grpc — seen in at least 81
next — seen in at least 81
requests — seen in at least 80
fast-xml-parser — seen in at least 79
launch-editor — seen in at least 79
rustls-pemfile — seen in at least 79
json — seen in at least 78
yargs-parser — seen in at least 78
hackney — seen in at least 77
path-parse — seen in at least 77
protobufjs — seen in at least 77
time — seen in at least 76
terser — seen in at least 75
activesupport — seen in at least 73
anyio — seen in at least 73
engine.io — seen in at least 73
got — seen in at least 73
hono — seen in at least 73
memmap2 — seen in at least 73
pygments — seen in at least 73
rsa — seen in at least 73
proc-macro-error — seen in at least 71
cryptography — seen in at least 70
hosted-git-info — seen in at least 70
underscore — seen in at least 70
webpack-dev-middleware — seen in at least 69
bytes — seen in at least 68
lodash.template — seen in at least 68
@xmldom/xmldom — seen in at least 67
jws — seen in at least 67
@protobufjs/utf8 — seen in at least 66
fflate — seen in at least 66
addressable — seen in at least 64
quinn-proto — seen in at least 64
cowlib — seen in at least 62
pacote — seen in at least 61
phoenix — seen in at least 61
instant — seen in at least 60
setuptools — seen in at least 60
proc-macro-error2 — seen in at least 59
adm-zip — seen in at least 58
cowboy — seen in at least 57
es5-ext — seen in at least 57
nth-check — seen in at least 56
async — seen in at least 55
mint — seen in at least 55
ejs — seen in at least 54
torch — seen in at least 54
y18n — seen in at least 54
@hono/node-server — seen in at least 53
@babel/runtime-corejs3 — seen in at least 52
rkyv — seen in at least 52
aiohttp — seen in at least 51
multer — seen in at least 51
http-cache-semantics — seen in at least 50
nokogiri — seen in at least 50
faraday — seen in at least 49
moment — seen in at least 49
pillow — seen in at least 49
tar-fs — seen in at least 49
validator — seen in at least 49
@grpc/grpc-js — seen in at least 48
ini — seen in at least 48
prismjs — seen in at least 48
serde_with — seen in at least 48
@octokit/request — seen in at least 47
@remix-run/router — seen in at least 47
adler — seen in at least 47
openssl — seen in at least 47
smol-toml — seen in at least 47
basic-ftp — seen in at least 46
transformers — seen in at least 46
@octokit/plugin-paginate-rest — seen in at least 45
@octokit/request-error — seen in at least 45
babel-traverse — seen in at least 45
fxhash — seen in at least 45
jsonwebtoken — seen in at least 45
mdast-util-to-hast — seen in at least 45
color-string — seen in at least 44
google.golang.org/protobuf — seen in at least 43
mermaid — seen in at least 43
node-notifier — seen in at least 43
ttf-parser — seen in at least 43
browserify-sign — seen in at least 42
defu — seen in at least 42
devalue — seen in at least 42
python-dotenv — seen in at least 42
starlette — seen in at least 42
eventsource — seen in at least 41
file-type — seen in at least 41
golang.org/x/text — seen in at least 41
loofah — seen in at least 41
plug_cowboy — seen in at least 41
rails-html-sanitizer — seen in at least 41
tracing-subscriber — seen in at least 41
url-parse — seen in at least 41
vue-template-compiler — seen in at least 41
morgan — seen in at least 40
node-fetch — seen in at least 40
protobuf — seen in at least 40
rack — seen in at least 40
sigstore — seen in at least 40
xml2js — seen in at least 40
fsevents — seen in at least 39
phpunit/phpunit — seen in at least 39
postgrex — seen in at least 39
req — seen in at least 39
tmpl — seen in at least 39
trim-newlines — seen in at least 39
filelock — seen in at least 38
gitpython — seen in at least 38
golang.org/x/sys — seen in at least 38
is-svg — seen in at least 37
kind-of — seen in at least 37
number_prefix — seen in at least 37
@opentelemetry/core — seen in at least 36
rexml — seen in at least 36
tokio — seen in at least 36
python-multipart — seen in at least 35
@angular/common — seen in at least 34
ua-parser-js — seen in at least 34
unic-char-property — seen in at least 34
unic-char-range — seen in at least 34
unic-common — seen in at least 34
unic-ucd-version — seen in at least 34
@eslint/plugin-kit — seen in at least 33
@isaacs/brace-expansion — seen in at least 33
black — seen in at least 33
glib — seen in at least 33
soupsieve — seen in at least 33
yaml-rust — seen in at least 33
@nestjs/core — seen in at least 32
jinja2 — seen in at least 32
js-cookie — seen in at least 32
min-document — seen in at least 32
sqlite3 — seen in at least 32
@angular/compiler — seen in at least 31
@sigstore/core — seen in at least 31
acorn — seen in at least 31
dns-packet — seen in at least 31
@ai-sdk/provider-utils — seen in at least 30
@angular/core — seen in at least 30
actionview — seen in at least 30
derivative — seen in at least 30
electron — seen in at least 30
excon — seen in at least 30
go.opentelemetry.io/otel/sdk — seen in at least 30
jwt — seen in at least 30
socket.io — seen in at least 30
ssri — seen in at least 30
github.com/docker/docker — seen in at least 29
mail — seen in at least 29
sockjs — seen in at least 29
symfony/yaml — seen in at least 29
toml — seen in at least 29
unic-ucd-ident — seen in at least 29
activestorage — seen in at least 28
dot-prop — seen in at least 28
hoek — seen in at least 28
html-minifier — seen in at least 28
nltk — seen in at least 28
glob-parent — seen in at least 27
msgpack — seen in at least 27
piscina — seen in at least 27
scc — seen in at least 27
vue — seen in at least 27
@faker-js/faker — seen in at least 26
atomic-polyfill — seen in at least 26
erb — seen in at least 26
rack-session — seen in at least 26
ring — seen in at least 26
virtualenv — seen in at least 26
decompress — seen in at least 25
pyasn1 — seen in at least 25
pyjwt — seen in at least 25
@smithy/config-resolver — seen in at least 24
ansi-html — seen in at least 24
atty — seen in at least 24
git2 — seen in at least 24
guzzlehttp/psr7 — seen in at least 24
highlight.js — seen in at least 24
nodemailer — seen in at least 24
opentelemetry_sdk — seen in at least 24
playwright — seen in at least 24
rubyzip — seen in at least 24
certifi — seen in at least 23
cookiejar — seen in at least 23
github.com/jackc/pgx/v5 — seen in at least 23
github.com/labstack/echo/v4 — seen in at least 23
go.mongodb.org/mongo-driver — seen in at least 23
h11 — seen in at least 23
mysql2 — seen in at least 23
shelljs — seen in at least 23
symfony/http-foundation — seen in at least 23
symfony/routing — seen in at least 23
tornado — seen in at least 23
github.com/sirupsen/logrus — seen in at least 22
guzzlehttp/guzzle — seen in at least 22
hawk — seen in at least 22
mongoose — seen in at least 22
svelte — seen in at least 22
accelerate — seen in at least 21
aws-sdk-s3 — seen in at least 21
datasets — seen in at least 21
get-func-name — seen in at least 21
mongodb — seen in at least 21
net-imap — seen in at least 21
pyo3 — seen in at least 21
semver-regex — seen in at least 21
symfony/process — seen in at least 21
thrift — seen in at least 21
github.com/gorilla/websocket — seen in at least 20
pymdown-extensions — seen in at least 20
react-dev-utils — seen in at least 20
set-value — seen in at least 20
websocket-extensions — seen in at least 20
@nestjs/common — seen in at least 19
@vitest/browser — seen in at least 19
bandit — seen in at least 19
faster-hex — seen in at least 19
github.com/golang-jwt/jwt — seen in at least 19
http-proxy — seen in at least 19
mem — seen in at least 19
rustybuzz — seen in at least 19
squizlabs/php_codesniffer — seen in at least 19
twig/twig — seen in at least 19
ansi_term — seen in at least 18
archive — seen in at least 18
csv-parse — seen in at least 18
gun — seen in at least 18
marked — seen in at least 18
object-path — seen in at least 18
pydantic-settings — seen in at least 18
symfony/cache — seen in at least 18
@opentelemetry/propagator-jaeger — seen in at least 17
astro — seen in at least 17
aws-sdk — seen in at least 17
dio — seen in at least 17
echarts — seen in at least 17
fastapi — seen in at least 17
formidable — seen in at least 17
github.com/jackc/pgproto3/v2 — seen in at least 17
immer — seen in at least 17
lxml — seen in at least 17
markdown — seen in at least 17
merge — seen in at least 17
parseuri — seen in at least 17
simple-git — seen in at least 17
symfony/http-kernel — seen in at least 17
valibot — seen in at least 17
activerecord — seen in at least 16
deepmerge-ts — seen in at least 16
dicer — seen in at least 16
django — seen in at least 16
flask — seen in at least 16
github.com/gin-gonic/gin — seen in at least 16
gopkg.in/yaml.v3 — seen in at least 16
happy-dom — seen in at least 16
langsmith — seen in at least 16
pyarrow — seen in at least 16
smartstring — seen in at least 16
turbo — seen in at least 16
werkzeug — seen in at least 16
aws-lc-sys — seen in at least 15
fastify — seen in at least 15
go.opentelemetry.io/otel/exporters/otlp/otlptrace — seen in at least 15
jupyter-server — seen in at least 15
ms — seen in at least 15
puma — seen in at least 15
tesla — seen in at least 15
wasmtime — seen in at least 15
async-std — seen in at least 14
bl — seen in at least 14
effect — seen in at least 14
koa — seen in at least 14
mako — seen in at least 14
mixin-deep — seen in at least 14
orjson — seen in at least 14
seroval — seen in at least 14
typeorm — seen in at least 14
@modelcontextprotocol/sdk — seen in at least 13
actionpack — seen in at least 13
backoff — seen in at least 13
bitmaps — seen in at least 13
crossbeam-channel — seen in at least 13
find-my-way — seen in at least 13
github.com/containerd/containerd — seen in at least 13
github.com/jackc/pgx/v4 — seen in at least 13
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc — seen in at least 13
merge-deep — seen in at least 13
mio — seen in at least 13
mkdocs-material — seen in at least 13
pip — seen in at least 13
react-router-dom — seen in at least 13
sanitize-html — seen in at least 13
storybook — seen in at least 13
tzinfo — seen in at least 13
uri — seen in at least 13
yard — seen in at least 13
@sigstore/verify — seen in at least 12
bootstrap — seen in at least 12
core2 — seen in at least 12
diskcache — seen in at least 12
dotenv — seen in at least 12
extend — seen in at least 12
github.com/dgrijalva/jwt-go — seen in at least 12
github.com/golang-jwt/jwt/v4 — seen in at least 12
golang.org/x/image — seen in at least 12
golang.org/x/oauth2 — seen in at least 12
gopkg.in/yaml.v2 — seen in at least 12
gradio — seen in at least 12
gunicorn — seen in at least 12
jose — seen in at least 12
karma — seen in at least 12
langchain — seen in at least 12
litellm — seen in at least 12
mcp — seen in at least 12
pypdf — seen in at least 12
sqlparse — seen in at least 12
tauri — seen in at least 12
trim — seen in at least 12
tunnel-agent — seen in at least 12
xlsx — seen in at least 12
xmlhttprequest-ssl — seen in at least 12
@opentelemetry/sdk-node — seen in at least 11
@sveltejs/kit — seen in at least 11
@tiptap/core — seen in at least 11
apollo-server-core — seen in at least 11
app-builder-lib — seen in at least 11
builder-util-runtime — seen in at least 11
chromadb — seen in at least 11
cmov — seen in at least 11
deep-extend — seen in at least 11
estree-util-value-to-estree — seen in at least 11
fonttools — seen in at least 11
gh-pages — seen in at least 11
github.com/moby/go-archive — seen in at least 11
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp — seen in at least 11
jszip — seen in at least 11
log4js — seen in at least 11
mistune — seen in at least 11
moment-timezone — seen in at least 11
showdown — seen in at least 11
sized-chunks — seen in at least 11
stringstream — seen in at least 11
symfony/twig-bridge — seen in at least 11
trim-off-newlines — seen in at least 11
webbrowser — seen in at least 11
webrick — seen in at least 11
@adobe/css-tools — seen in at least 10
@cypress/request — seen in at least 10
bleach — seen in at least 10
express-rate-limit — seen in at least 10
fresh — seen in at least 10
github.com/golang/glog — seen in at least 10
github.com/opencontainers/runc — seen in at least 10
github.com/rabbitmq/amqp091-go — seen in at least 10
jquery — seen in at least 10
jsonpointer — seen in at least 10
lodash.pick — seen in at least 10
lodash.set — seen in at least 10
marshmallow — seen in at least 10
node-sass — seen in at least 10
parse-path — seen in at least 10
parse-url — seen in at least 10
preact — seen in at least 10
scss-tokenizer — seen in at least 10
sshpk — seen in at least 10
store2 — seen in at least 10
symfony/dom-crawler — seen in at least 10
symfony/polyfill-intl-idn — seen in at least 10
tqdm — seen in at least 10
ujson — seen in at least 10
zipp — seen in at least 10
@intlify/core-base — seen in at least 9
@octokit/endpoint — seen in at least 9
actix-http — seen in at least 9
chownr — seen in at least 9
class-validator — seen in at least 9
crypto-js — seen in at least 9
dottie — seen in at least 9
drizzle-orm — seen in at least 9
fast-xml-builder — seen in at least 9
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream — seen in at least 9
github.com/docker/cli — seen in at least 9
github.com/quic-go/quic-go — seen in at least 9
go.opentelemetry.io/otel — seen in at least 9
hickory-proto — seen in at least 9
langchain-core — seen in at least 9
league/commonmark — seen in at least 9
mime — seen in at least 9
pdfjs-dist — seen in at least 9
protocol-buffers-schema — seen in at least 9
pydantic — seen in at least 9
quill — seen in at least 9
rmcp — seen in at least 9
rustix — seen in at least 9
sentencepiece — seen in at least 9
sequelize — seen in at least 9
symfony/mime — seen in at least 9
symfony/validator — seen in at least 9
xmldom — seen in at least 9
@parcel/reporter-dev-server — seen in at least 8
@sideway/formula — seen in at least 8
authlib — seen in at least 8
bcrypt — seen in at least 8
bumpalo — seen in at least 8
clean-css — seen in at least 8
cocoapods-downloader — seen in at least 8
cxx — seen in at least 8
github.com/gofiber/fiber/v2 — seen in at least 8
h3 — seen in at least 8
hpack — seen in at least 8
jupyterlab — seen in at least 8
katex — seen in at least 8
keras — seen in at least 8
lz4_flex — seen in at least 8
mach — seen in at least 8
markdown-to-jsx — seen in at least 8
net2 — seen in at least 8
normalize-url — seen in at least 8
onnx — seen in at least 8
pathval — seen in at least 8
phoenix_html — seen in at least 8
python-jose — seen in at least 8
rand_os — seen in at least 8
randomatic — seen in at least 8
safemem — seen in at least 8
scikit-learn — seen in at least 8
serde_cbor — seen in at least 8
systeminformation — seen in at least 8
thenify — seen in at least 8
uglify-js — seen in at least 8
undefsafe — seen in at least 8
useragent — seen in at least 8
vue-i18n — seen in at least 8
@opentelemetry/exporter-prometheus — seen in at least 7
aws-sdk-sso — seen in at least 7
aws-sdk-ssooidc — seen in at least 7
aws-sdk-sts — seen in at least 7
composer/composer — seen in at least 7
diesel — seen in at least 7
diffusers — seen in at least 7
gix-fs — seen in at least 7
growl — seen in at least 7
grpc — seen in at least 7
http — seen in at least 7
httpcore2 — seen in at least 7
httplib2 — seen in at least 7
https-proxy-agent — seen in at least 7
httpx2 — seen in at least 7
im — seen in at least 7
jaraco-context — seen in at least 7
laravel/framework — seen in at least 7
maplibre-gl — seen in at least 7
nesbot/carbon — seen in at least 7
npm — seen in at least 7
npm-registry-fetch — seen in at least 7
nx — seen in at least 7
phin — seen in at least 7
remove_dir_all — seen in at least 7
slab — seen in at least 7
tokio-postgres — seen in at least 7
wheel — seen in at least 7
zod — seen in at least 7
@apollo/server — seen in at least 6
@nestjs/microservices — seen in at least 6
angular — seen in at least 6
aws-cdk-lib — seen in at least 6
azure-core — seen in at least 6
chrono — seen in at least 6
d3-color — seen in at least 6
difference — seen in at least 6
dnspython — seen in at least 6
fstream — seen in at least 6
github.com/aws/aws-sdk-go-v2/service/s3 — seen in at least 6
github.com/buger/jsonparser — seen in at least 6
github.com/gin-contrib/cors — seen in at least 6
github.com/google/cel-go — seen in at least 6
github.com/prometheus/client_golang — seen in at least 6
gix-validate — seen in at least 6
kysely — seen in at least 6
langchain-openai — seen in at least 6
langchain-text-splitters — seen in at least 6
lexical-core — seen in at least 6
liquidjs — seen in at least 6
macaddress — seen in at least 6
mockjs — seen in at least 6
numpy — seen in at least 6
oauth2 — seen in at least 6
plist — seen in at least 6
property-expr — seen in at least 6
pug — seen in at least 6
react-devtools-core — seen in at least 6
redis — seen in at least 6
stream-json — seen in at least 6
streamlit — seen in at least 6
symfony/monolog-bridge — seen in at least 6
symfony/runtime — seen in at least 6
taffydb — seen in at least 6
telejson — seen in at least 6
turbo-stream — seen in at least 6
uv — seen in at least 6
vllm — seen in at least 6
webpki — seen in at least 6
@fastify/static — seen in at least 5
@hapi/joi — seen in at least 5
@hapi/wreck — seen in at least 5
@nestjs/platform-fastify — seen in at least 5
@opentelemetry/auto-instrumentations-node — seen in at least 5
action_text-trix — seen in at least 5
actionmailer — seen in at least 5
algoliasearch-helper — seen in at least 5
degenerator — seen in at least 5
djangorestframework — seen in at least 5
dset — seen in at least 5
eazy-logger — seen in at least 5
ecdsa — seen in at least 5
element-plus — seen in at least 5
encoding — seen in at least 5
firebase/php-jwt — seen in at least 5
github.com/disintegration/imaging — seen in at least 5
github.com/go-chi/chi/v5 — seen in at least 5
github.com/go-viper/mapstructure/v2 — seen in at least 5
gix-sec — seen in at least 5
graphql — seen in at least 5
httparty — seen in at least 5
hyper — seen in at least 5
i18next-http-backend — seen in at least 5
im-rc — seen in at least 5
jsonpath-plus — seen in at least 5
keccak — seen in at least 5
kramdown — seen in at least 5
langchain-anthropic — seen in at least 5
lodash.merge — seen in at least 5
nbconvert — seen in at least 5
negotiator — seen in at least 5
oj — seen in at least 5
opencv-python — seen in at least 5
pac-resolver — seen in at least 5
parse-git-config — seen in at least 5
pnpm — seen in at least 5
postgres-protocol — seen in at least 5
psy/psysh — seen in at least 5
pug-code-gen — seen in at least 5
pymongo — seen in at least 5
pyopenssl — seen in at least 5
pytorch-lightning — seen in at least 5
pyyaml — seen in at least 5
rpassword — seen in at least 5
semantic-release — seen in at least 5
sqlx — seen in at least 5
symfony/security-http — seen in at least 5
term_size — seen in at least 5
tokio-io — seen in at least 5
tokio-tar — seen in at least 5
underscore.string — seen in at least 5
urijs — seen in at least 5
vm2 — seen in at least 5
@antfu/utils — seen in at least 4
@apollo/gateway — seen in at least 4
@fastify/middie — seen in at least 4
@hapi/content — seen in at least 4
@hapi/hoek — seen in at least 4
@remix-run/node — seen in at least 4
@sentry/browser — seen in at least 4
absinthe — seen in at least 4
anstream — seen in at least 4
better-auth — seen in at least 4
connect — seen in at least 4
crossbeam-utils — seen in at least 4
css-what — seen in at least 4
daemonize — seen in at least 4
devise — seen in at least 4
eslint-utils — seen in at least 4
expr-eval — seen in at least 4
fastmcp — seen in at least 4
ffi — seen in at least 4
firebase — seen in at least 4
gcc — seen in at least 4
git — seen in at least 4
github.com/go-chi/chi — seen in at least 4
github.com/go-git/go-git/v5 — seen in at least 4
github.com/golang-jwt/jwt/v5 — seen in at least 4
github.com/nats-io/nats-server/v2 — seen in at least 4
github.com/prometheus/prometheus — seen in at least 4
github.com/ulikunitz/xz — seen in at least 4
hydra-core — seen in at least 4
is-my-json-valid — seen in at least 4
json-repair — seen in at least 4
jspdf — seen in at least 4
jupyter-core — seen in at least 4
kafka-python — seen in at least 4
lexical — seen in at least 4
libsecp256k1 — seen in at least 4
libyml — seen in at least 4
lightning — seen in at least 4
lock_api — seen in at least 4
lodash.mergewith — seen in at least 4
luxon — seen in at least 4
lxml-html-clean — seen in at least 4
mpath — seen in at least 4
msgpackr — seen in at least 4
multipart — seen in at least 4
multiparty — seen in at least 4
netmask — seen in at least 4
next-auth — seen in at least 4
nix — seen in at least 4
nodejs — seen in at least 4
notebook — seen in at least 4
npm-user-validate — seen in at least 4
nwmatcher — seen in at least 4
phpseclib/phpseclib — seen in at least 4
rake — seen in at least 4
requirejs — seen in at least 4
rtrb — seen in at least 4
ruint — seen in at least 4
russh — seen in at least 4
scipy — seen in at least 4
sentry-sdk — seen in at least 4
serde_yml — seen in at least 4
srvx — seen in at least 4
stdlib — seen in at least 4
sweetalert2 — seen in at least 4
swiper — seen in at least 4
symfony/mailer — seen in at least 4
symfony/security-bundle — seen in at least 4
tensorflow — seen in at least 4
tokio-tls — seen in at least 4
tsup — seen in at least 4
unhead — seen in at least 4
velocityjs — seen in at least 4
wasmtime-jit-debug — seen in at least 4
wasmtime-wasi — seen in at least 4
webpack-subresource-integrity — seen in at least 4
wrangler — seen in at least 4
yauzl — seen in at least 4
@75lb/deep-merge — seen in at least 3
@angular/platform-server — seen in at least 3
@apollo/query-planner — seen in at least 3
@azure/identity — seen in at least 3
@hey-api/openapi-ts — seen in at least 3
@langchain/community — seen in at least 3
@langchain/core — seen in at least 3
@nevware21/ts-utils — seen in at least 3
@remix-run/server-runtime — seen in at least 3
actiontext — seen in at least 3
agno — seen in at least 3
ai — seen in at least 3
apollo-server-express — seen in at least 3
atob — seen in at least 3
aws-sdk-kms — seen in at least 3
azure_core — seen in at least 3
banks — seen in at least 3
bare-metal — seen in at least 3
bigint-buffer — seen in at least 3
browserstack-local — seen in at least 3
buf_redux — seen in at least 3
cached-path-relative — seen in at least 3
cap-primitives — seen in at least 3
cap-std — seen in at least 3
chromedriver — seen in at least 3
chrono-english — seen in at least 3
com.fasterxml.jackson.core:jackson-core — seen in at least 3
com.fasterxml.jackson.core:jackson-databind — seen in at least 3
cookie-signature — seen in at least 3
copy-props — seen in at least 3
cryptiles — seen in at least 3
curl-cffi — seen in at least 3
curve25519-dalek — seen in at least 3
datamodel-code-generator — seen in at least 3
diesel-async — seen in at least 3
dom-iterator — seen in at least 3
ecstatic — seen in at least 3
eta — seen in at least 3
flash-attn — seen in at least 3
github.com/antchfx/xpath — seen in at least 3
github.com/apache/thrift — seen in at least 3
github.com/docker/distribution — seen in at least 3
github.com/getkin/kin-openapi — seen in at least 3
github.com/go-jose/go-jose/v4 — seen in at least 3
github.com/jackc/pgproto3 — seen in at least 3
github.com/opencontainers/image-spec — seen in at least 3
github.com/pion/dtls/v3 — seen in at least 3
github.com/pion/stun/v3 — seen in at least 3
github.com/uptrace/bun/driver/pgdriver — seen in at least 3
github.com/vektah/gqlparser/v2 — seen in at least 3
gix — seen in at least 3
gix-pack — seen in at least 3
globalid — seen in at least 3
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc — seen in at least 3
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp — seen in at least 3
go.opentelemetry.io/otel/exporters/zipkin — seen in at least 3
google-protobuf — seen in at least 3
grid — seen in at least 3
http-types — seen in at least 3
httpx — seen in at least 3
io.netty:netty-codec-http — seen in at least 3
io.netty:netty-handler — seen in at least 3
jmespath — seen in at least 3
jpeg-js — seen in at least 3
jsondiffpatch — seen in at least 3
jsrsasign — seen in at least 3
jwcrypto — seen in at least 3
langchain-community — seen in at least 3
langgraph — seen in at least 3
langgraph-checkpoint — seen in at least 3
libgit2-sys — seen in at least 3
libsql-sqlite3-parser — seen in at least 3
lopdf — seen in at least 3
memoffset — seen in at least 3
mquery — seen in at least 3
music-metadata — seen in at least 3
mysql — seen in at least 3
oauth — seen in at least 3
opentelemetry_api — seen in at least 3
org.apache.commons:commons-lang3 — seen in at least 3
org.apache.httpcomponents.client5:httpclient5 — seen in at least 3
org.apache.httpcomponents.core5:httpcore5 — seen in at least 3
org.apache.httpcomponents.core5:httpcore5-h2 — seen in at least 3
org.bouncycastle:bcpkix-jdk18on — seen in at least 3
org.bouncycastle:bcprov-jdk18on — seen in at least 3
org.jetbrains.kotlin:kotlin-gradle-plugin — seen in at least 3
owning_ref — seen in at least 3
paramiko — seen in at least 3
protobufjs-cli — seen in at least 3
pyspark — seen in at least 3
querystringify — seen in at least 3
ray — seen in at least 3
react-pdf — seen in at least 3
rustc-serialize — seen in at least 3
salsa — seen in at least 3
sandbox — seen in at least 3
scrapy — seen in at least 3
secp256k1 — seen in at least 3
selenium — seen in at least 3
shlex — seen in at least 3
simple-plist — seen in at least 3
sinatra — seen in at least 3
slim/slim — seen in at least 3
smallvec — seen in at least 3
stdweb — seen in at least 3
structopt — seen in at least 3
swagger-ui-dist — seen in at least 3
swiftmailer/swiftmailer — seen in at least 3
symfony/dependency-injection — seen in at least 3
symfony/http-client — seen in at least 3
symfony/serializer — seen in at least 3
symfony/symfony — seen in at least 3
term — seen in at least 3
tinymce — seen in at least 3
tokio-codec — seen in at least 3
tokio-executor — seen in at least 3
tokio-reactor — seen in at least 3
tokio-sync — seen in at least 3
tokio-tcp — seen in at least 3
traitobject — seen in at least 3
tree-kill — seen in at least 3
trix — seen in at least 3
ts-deepmerge — seen in at least 3
tungstenite — seen in at least 3
twoway — seen in at least 3
unic-emoji-char — seen in at least 3
vcrpy — seen in at least 3
vite-plugin-static-copy — seen in at least 3
vite-plus — seen in at least 3
webob — seen in at least 3
whoami — seen in at least 3
zrender — seen in at least 3