@cyberhub/trust-faker 1.0.62 → 1.0.64
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +11 -11
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
# Security Trust Report: faker
|
|
2
2
|
|
|
3
|
-
**faker@6.6.6: 54/100 | Grade: C | Tier: STANDARD** (confidence: ±3)
|
|
3
|
+
**[faker@6.6.6](https://www.npmjs.com/package/faker): 54/100 | Grade: C | Tier: STANDARD** (confidence: ±3)
|
|
4
4
|
|
|
5
|
-
>
|
|
5
|
+
> Scanned on 2026-04-10 from 8 security databases. [View package on npm →](https://www.npmjs.com/package/faker)
|
|
6
6
|
|
|
7
7
|
## TL;DR
|
|
8
8
|
|
|
@@ -41,7 +41,7 @@ Community: █████████░░░░░░░░░░░
|
|
|
41
41
|
|
|
42
42
|
- 🔴 **CRITICAL**: HISTORICAL BREACH: Maintainer sabotaged — deleted all code (2022)
|
|
43
43
|
- 🔴 **CRITICAL**: Maintainer "marak" has history of package sabotage
|
|
44
|
-
- 🟠 **HIGH**: Maintainer(s) removed in v2.1.4: fotoverite
|
|
44
|
+
- 🟠 **HIGH**: Maintainer(s) removed in v2.1.4: fotoverite ([evidence](https://www.npmjs.com/package/faker/v/2.1.4))
|
|
45
45
|
- 🟠 **HIGH**: 1 HIGH vulnerability detected
|
|
46
46
|
|
|
47
47
|
## 🛠️ What Should You Do?
|
|
@@ -55,22 +55,22 @@ Community: █████████░░░░░░░░░░░
|
|
|
55
55
|
|
|
56
56
|
## 🔄 Safer Alternatives
|
|
57
57
|
|
|
58
|
-
| Package | Why | Trust
|
|
59
|
-
|
|
60
|
-
| **@faker-js/faker** | Community fork, actively maintained | [View score](https://nrupak.com/trust/%40faker-js%2Ffaker) |
|
|
61
|
-
| **chance** | Random data generator | [View score](https://nrupak.com/trust/chance) |
|
|
58
|
+
| Package | Why | npm | Trust Score |
|
|
59
|
+
|---------|-----|-----|-------------|
|
|
60
|
+
| **@faker-js/faker** | Community fork, actively maintained | [npm](https://www.npmjs.com/package/%40faker-js%2Ffaker) | [View score](https://nrupak.com/trust/%40faker-js%2Ffaker) |
|
|
61
|
+
| **chance** | Random data generator | [npm](https://www.npmjs.com/package/chance) | [View score](https://nrupak.com/trust/chance) |
|
|
62
62
|
|
|
63
|
-
## Maintainers
|
|
63
|
+
## Maintainers (1)
|
|
64
64
|
|
|
65
|
-
- ⛔ **[marak](https://
|
|
65
|
+
- ⛔ **[marak](https://www.npmjs.com/~marak)** — COMPROMISED: Deliberately sabotaged colors and faker (2022) ([Trust profile](https://nrupak.com/trust/maintainer/marak))
|
|
66
66
|
|
|
67
67
|
**Methodology:** 18+ signals across 4 categories (Maintainer 35%, Package 25%, Supply Chain 25%, Community 15%). [Full scoring docs →](https://nrupak.com/trust)
|
|
68
68
|
|
|
69
69
|
**Check your project:** `npm i -g @cyberhub/pkgtrust && pkgtrust scan faker` — [CLI docs](https://npmjs.com/package/@cyberhub/pkgtrust)
|
|
70
|
-
**Data Sources:** GitHub Advisories · OSV.dev · npm audit · Snyk · Socket.dev · npms.io · Bundlephobia · deps.dev
|
|
70
|
+
**Data Sources:** GitHub Advisories · OSV.dev · npm audit · Snyk · Socket.dev · npms.io · Bundlephobia · deps.dev · CISA KEV · Packagephobia · OpenSSF Scorecard · Ecosyste.ms · GitHub Enhanced · Keybase · npm Provenance
|
|
71
71
|
|
|
72
72
|
---
|
|
73
73
|
|
|
74
74
|
*Report by [pkgtrust](https://nrupak.com/trust/faker) · [Dashboard](https://nrupak.com/trust) · [Compare](https://nrupak.com/trust/compare) · [CLI](https://npmjs.com/package/@cyberhub/pkgtrust)*
|
|
75
75
|
|
|
76
|
-
*This is an automated security report. Not affiliated with the faker team. Updated 2026-04-
|
|
76
|
+
*This is an automated security report. Not affiliated with the faker team. Updated 2026-04-10.*
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cyberhub/trust-faker",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.64",
|
|
4
4
|
"description": "Security Trust Report: faker@6.6.6 — 54/100 (C, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"faker",
|