Generated source
This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.
ecosystem
npm command packages
npm packages with local package pages and command-line or developer workflow metadata.
summary
Why this package group is here
npm command packages currently includes 2466 package catalog entries. 0 have protected-tool coverage, 0 have approval-gate metadata, and 0 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.
Review model
Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.
High-signal tools
semverThe semantic version parser used by npm.whichLike which(1) unix command. Find the first instance of an executable in the PATH.uuidRFC9562 UUIDsesbuildAn extremely fast JavaScript and CSS bundler and minifier.js-yamlYAML 1.2 parser and serializeracornECMAScript parserresolveresolve like require.resolve() on behalf of files asynchronously and synchronouslyjson5JSON for HumansnanoidA tiny (118 bytes), secure URL-friendly unique string ID generatorbrowserslistShare target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-presetyamlJavaScript parser and stringifier for YAMLupdate-browserslist-dbCLI tool to update caniuse-lite to refresh target browsers from Browserslist config
Related hubs
Representative package spokes
semverThe semantic version parser used by npm.whichLike which(1) unix command. Find the first instance of an executable in the PATH.uuidRFC9562 UUIDsesbuildAn extremely fast JavaScript and CSS bundler and minifier.js-yamlYAML 1.2 parser and serializeracornECMAScript parserresolveresolve like require.resolve() on behalf of files asynchronously and synchronouslyjson5JSON for HumansnanoidA tiny (118 bytes), secure URL-friendly unique string ID generatorbrowserslistShare target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-presetyamlJavaScript parser and stringifier for YAMLupdate-browserslist-dbCLI tool to update caniuse-lite to refresh target browsers from Browserslist configjitiRuntime typescript and ESM support for Node.jsjsescGiven some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.mkdirpRecursively mkdir, like mkdir -primrafA deep deletion module for node (like rm -rf)
packages
Indexed package pages
| Package | Manager | Signals | Why it appears here |
|---|---|---|---|
| semver | npm | v7.8.4 | The semantic version parser used by npm. |
| which | npm | v7.0.0 | Like which(1) unix command. Find the first instance of an executable in the PATH. |
| uuid | npm | v14.0.0 | RFC9562 UUIDs |
| esbuild | npm | v0.28.1 | An extremely fast JavaScript and CSS bundler and minifier. |
| js-yaml | npm | v4.2.0 | YAML 1.2 parser and serializer |
| acorn | npm | v8.17.0 | ECMAScript parser |
| resolve | npm | v1.22.12 | resolve like require.resolve() on behalf of files asynchronously and synchronously |
| json5 | npm | v2.2.3 | JSON for Humans |
| nanoid | npm | v5.1.11 | A tiny (118 bytes), secure URL-friendly unique string ID generator |
| browserslist | npm | v4.28.2 | Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset |
| yaml | npm | v2.9.0 | JavaScript parser and stringifier for YAML |
| update-browserslist-db | npm | v1.2.3 | CLI tool to update caniuse-lite to refresh target browsers from Browserslist config |
| jiti | npm | v2.7.0 | Runtime typescript and ESM support for Node.js |
| jsesc | npm | v3.1.0 | Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data. |
| mkdirp | npm | v3.0.1 | Recursively mkdir, like mkdir -p |
| rimraf | npm | v6.1.3 | A deep deletion module for node (like rm -rf) |
| eslint | npm | v10.5.0 | An AST-based pattern checker for JavaScript. |
| vite | npm | v8.0.16 | Native-ESM powered web dev build tool |
| mime | npm | v4.1.0 | A comprehensive library for mime-type mapping |
| baseline-browser-mapping | npm | v2.10.37 | A library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status. |
| rollup | npm | v4.62.0 | Next-generation ES module bundler |
| prettier | npm | v3.8.4 | Prettier is an opinionated code formatter |
| loose-envify | npm | v1.4.0 | Fast (and loose) selective process.env replacer using js-tokens instead of an AST |
| pnpm | npm | v11.7.0 | Fast, disk space efficient package manager |
| is-docker | npm | v4.0.0 | Check if the process is running inside a Docker container |
| cssesc | npm | v3.0.0 | A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output. |
| nopt | npm | v10.0.1 | Option parsing for Node, supporting types, shorthands, etc. Used by npm. |
| fast-xml-parser | npm | v5.9.0 | Validate XML, Parse XML, Build XML without C/C++ based libraries |
| terser | npm | v5.48.0 | JavaScript parser, mangler/compressor and beautifier toolkit for ES6+ |
| autoprefixer | npm | v10.5.0 | Parse CSS and add vendor prefixes to CSS rules using values from the Can I Use website |
| tsx | npm | v4.22.4 | TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files |
| vitest | npm | v4.1.9 | Next generation testing framework powered by Vite |
| playwright-core | npm | v1.61.0 | A high-level API to automate web browsers |
| sucrase | npm | v3.35.1 | Super-fast alternative to Babel for when you can target modern JS runtimes |
| eslint-config-prettier | npm | v10.1.8 | Turns off all rules that are unnecessary or might conflict with Prettier. |
| playwright | npm | v1.61.0 | A high-level API to automate web browsers |
| tldts | npm | v7.4.3 | Library to work against complex domain names, subdomains and URIs. |
| escodegen | npm | v2.1.0 | ECMAScript code generator |
| why-is-node-running | npm | v3.2.2 | Node is running but you don't know why? why-is-node-running is here to help you. |
| node-gyp | npm | v13.0.0 | Node.js native addon build tool |
| webpack | npm | v5.107.2 | Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on dema… |
| regjsparser | npm | v0.13.2 | Parsing the JavaScript's RegExp in JavaScript. |
| marked | npm | v18.0.5 | A markdown parser built for speed |
| jest | npm | v30.4.2 | Delightful JavaScript Testing. |
| lz-string | npm | v1.5.0 | LZ-based compression algorithm |
| jest-cli | npm | v30.4.2 | Delightful JavaScript Testing. |
| import-local | npm | v3.2.0 | Let a globally installed package use a locally installed version of itself if available |
| ts-node | npm | v10.9.2 | TypeScript execution environment and REPL for node.js, with source map support |
| uglify-js | npm | v3.19.3 | JavaScript parser, mangler/compressor and beautifier toolkit |
| tree-kill | npm | v1.2.2 | kill trees of processes |
| handlebars | npm | v4.7.9 | Handlebars provides the power necessary to let you build semantic templates effectively with no frustration |
| rolldown | npm | v1.1.1 | Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API. |
| next | npm | v16.2.9 | The React Framework |
| node-gyp-build | npm | v4.8.4 | Build tool and bindings loader for node-gyp that supports prebuilds |
| napi-postinstall | npm | v0.3.4 | The postinstall script helper for handling native bindings in legacy npm versions |
| rc | npm | v1.2.8 | hardwired configuration loader |
| he | npm | v1.2.0 | A robust HTML entities encoder/decoder with full Unicode support. |
| crc-32 | npm | v1.2.2 | Pure-JS CRC-32 |
| is-inside-container | npm | v1.0.0 | Check if the process is running inside a container (Docker/Podman) |
| pino | npm | v10.3.1 | super fast, all natural json logger |
| vite-node | npm | v6.0.0 | Vite as Node.js runtime |
| ejs | npm | v6.0.1 | Embedded JavaScript templates |
| svgo | npm | v4.0.1 | SVGO is a Node.js library and command-line application for optimizing vector images. |
| image-size | npm | v2.0.2 | get dimensions of any image file |
| husky | npm | v9.1.7 | Modern native Git hooks |
| flat | npm | v6.0.1 | Take a nested Javascript object and flatten it, or unflatten an object with delimited keys |
| ua-parser-js | npm | v2.0.10 | Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment |
| jake | npm | v12.10.1 | JavaScript build tool, similar to Make or Rake |
| sass | npm | v1.101.0 | A pure JavaScript implementation of Sass. |
| h3 | npm | v2.0.1-rc.22 | Minimal H(TTP) framework built for high performance and portability. |
| ts-jest | npm | v29.4.11 | A Jest transformer with source map support that lets you use Jest to test projects written in TypeScript |
| extract-zip | npm | v2.0.1 | unzip a zip file into a directory using 100% javascript |