Is npmhub safe?
Shows npm dependencies and related package links on GitHub repositories with package.json files.
This extension adds a dependencies list at the bottom of GitHub repository or folder pages that contain a package.json file. It also adds links to the package.json file and package resources such as npmjs.com, RunKit, BundlePhobia, PackagePhobia, NPMGraph, and UNPKG. GitHub Enterprise domains can be enabled from the toolbar icon menu.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed npmhub contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- unpkg.com
npmhub sends data to unpkg.com. 10 other extensions we have analysed send data here.
- bundlephobia.com
npmhub sends data to bundlephobia.com. No other extension we have analysed sends data here.
- npmgraph.js.org
npmhub sends data to npmgraph.js.org. No other extension we have analysed sends data here.
- npmjs.com
npmhub sends data to npmjs.com. No other extension we have analysed sends data here.
- packagephobia.com
npmhub sends data to packagephobia.com. No other extension we have analysed sends data here.
- runkit.com
npmhub sends data to runkit.com. No other extension we have analysed sends data here.