46,707 packages listed, out of 47,540 we track registry-wide.
The difference is packages we have delisted or removed, plus any we hold a record of but that are not distributed anywhere.
We show every scanner’s verdict side by side. You decide which scanners to trust.
No findings does not mean no risk. Nerlo aggregates automated scanner output; automated scanning is one layer of defence, not a substitute for review.
Artifacts from a curated list of well-known vendors are listed first, then everything else by verdict. Curation is about who published an artifact, not whether it is safe — a vendor artifact keeps whatever verdict its scanners gave it, including Flagged. Artifacts whose verdict we are withholding sort with the unrated ones, so their position tells you nothing we have not published.
Showing 41–60 of 46,707 packages.