Open source npm projects

Every project in the registry tagged npm, ranked by real GitHub adoption.

projects 5 combined stars ★ 74K refresh nightly
01 lerna ★ 36K

Lerna is a fast, modern build system for managing and publishing multiple JavaScript/TypeScript packages from the same repository.

last push6 hours ago languageTypeScript licenseMIT
02 crawlee ★ 26K

Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or G

last push7 hours ago languageTypeScript licenseApache-2.0
03 codex-security ★ 11K

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-se

last push5 hours ago languageTypeScript licenseApache-2.0
04 ship-safe ★ 844

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API

last push2 days ago languageJavaScript licenseMIT
05 packj ★ 693

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software suppl

last push17 hours ago languagePython licenseAGPL-3.0

Related tags

← all tags

Frequently asked questions

How many open source npm projects are there?

This registry tracks 5 projects tagged npm, with 74,163 GitHub stars between them. The most-adopted is lerna at 36,053 stars.

Are these npm projects free to use?

Yes — 5 of the 5 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which npm project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these npm projects still maintained?

5 of the 5 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.