6.9
canvas
📦 npm PackageTJ Holowaychuk
Canvas graphics API backed by Cairo. Keywords: canvas, graphic, graphics, pixman, cairo. 27M monthly downloads. License: MIT
27,228,965 usersv3.2.3
Medium Risk6.9/10
Scanned June 2, 2026
·Risk Flags
Runs code automatically during installation (install scripts detected)
3.0
Permissions
9.0
Developer
10.0
Data Privacy
7.0
Policy Match
Permissions (1)
Runs code during installation: prebuild-install -r napi || node-gyp rebuild
script:install
Developer
NameTJ Holowaychuk
Verified PublisherUnverified
Known EntityRecognized
Websitehttps://github.com/Automattic/node-canvas
Contacttj@learnboost.com
Data Flows
No external data transmission detected
This tool does not appear to send data to external servers.
Privacy Policy Analysis
Policy Status
No policy found
Policy matches observed behavior
Higher-Scored Alternatives
Other npm Packages with stronger security profiles
9.4
lodash
Lodash modular utilities. Keywords: modules, stdlib, util. 663M monthly downloads. License: MIT
9.4/10+2.5 vs this tool
9.4
chalk
Terminal string styling done right. Keywords: color, colour, colors, terminal, console. 1.9B monthly downloads. License: MIT
9.4/10+2.5 vs this tool
9.4
@chakra-ui/react
Responsive and accessible React UI components built with React and Emotion
9.4/10+2.5 vs this tool
9.4
@aws-sdk/client-sqs
AWS SDK for JavaScript Sqs Client for Node.js, Browser and React Native
9.4/10+2.5 vs this tool
Know what your tools are really doing.