brin
brin

@npmcli/arborist

npm

Is @npmcli/arborist safe to use?

Based on the latest brin safety scan, no vulnerabilities or threats were detected for @npmcli/arborist v9.3.1. Trust score: 85/100. No known CVE vulnerabilities, no detected threat patterns, and no suspicious capabilities identified. This is an automated, point-in-time assessment.

Install (safety-checked)

@npmcli/arborist Passed Security Checks

No security concerns detected

clean
CVEs

0

Threats

0

Install Scripts

0

No Concerns Detected

No security concerns detected in the latest brin assessment. This is an automated, point-in-time evaluation — security posture may change.

This is an automated, point-in-time assessment and may contain errors. Findings are risk indicators, not confirmed threats. Security posture may change over time. Maintainers can dispute findings via the brin review process.

@npmcli/arborist Capabilities & Permissions

What @npmcli/arborist can access when installed. Review these capabilities before using with AI agents like Cursor, Claude Code, or Codex.

Filesystem Access

Reads and writes to the filesystem.

node_modules (r)/usr/ (r)node_modules (r)package.json (r).env (rw)/usr/ (rw)node_modules (rw)package.json (rw)+19 more

Process Spawning

This package can spawn child processes.

Environment Variables

Accesses the following environment variables.

ARBORIST_DEBUGHOMENODE_DEBUGnpm_lifecycle_eventnpm_package_name

AGENTS.md for @npmcli/arborist

Good instructions lead to good results. brin adds @npmcli/arborist documentation to your AGENTS.md so your agent knows how to use it properly—improving both safety and performance.

brin init

Vercel's research: 100% accuracy with AGENTS.md vs 53% without →

@npmcli/arborist Documentation & Source Code

For the full @npmcli/arborist README, API documentation, and source code, visit the official package registry.

View on npmView SourceHomepage

Frequently asked questions about @npmcli/arborist safety

Weekly Downloads

3.8M

Version

9.3.1

License

ISC

Last Scanned

1 day ago

Trust Score

85/100·Legitimacy signals, not safety

Capabilities

Filesystem

Reads & Writes files

Process

Spawns child processes

Environment

Accesses: ARBORIST_DEBUG, HOME, NODE_DEBUG...