7.4
semver
📦 npm PackageGitHub Inc.
The semantic version parser used by npm.
v7.8.1
Medium Risk7.4/10
Scanned June 2, 2026
Risk Flags
Developer identity is not verified by the platform
6.0
Permissions
6.0
Developer
10.0
Data Privacy
7.0
Policy Match
Permissions (1)
Installs executable CLI commands
capability:binary
Developer
NameGitHub Inc.
Verified PublisherUnverified
Known EntityNot recognized
Websitehttps://github.com/npm/node-semver#readme
Contactsaquibkhan@github.com
Data Flows
No external data transmission detected
This tool does not appear to send data to external servers.
Privacy Policy Analysis
Policy Status
No policy found
Policy matches observed behavior
Alternatives to Consider
Know what your tools are really doing.