6.5
pm2
📦 npm PackageStrzelewicz Alexandre
Production process manager for Node.JS applications with a built-in load balancer.
12,622,404 usersv7.0.1
Medium Risk6.5/10
Scanned June 2, 2026
·Risk Flags
Developer identity is not verified by the platform
Shares data with external services: WebSocket connections
Policy concern: package includes network libraries but no privacy documentation
6.0
Permissions
7.5
Developer
8.5
Data Privacy
2.0
Policy Match
Permissions (3)
WebSocket library
dep:ws
Installs executable CLI commands
capability:binary
22 dependencies
dependencies:moderate
Developer
NameStrzelewicz Alexandre
Verified PublisherUnverified
Known EntityNot recognized
Websitehttp://pm2.keymetrics.io/
Contactalexandre@pm2.io
Data Flows
WebSocket connections3rd party
Encryptedreal-time data
Privacy Policy Analysis
Policy Status
No policy found
Policy Mismatches Found
- Package includes network libraries but no privacy documentation
Higher-Scored Alternatives
Other npm Packages with stronger security profiles
9.4
cookie-parser
Parse HTTP request cookies. Keywords: cookie, middleware. 38M monthly downloads. License: MIT
9.4/10+2.9 vs this tool
9.4
@aws-sdk/client-sqs
AWS SDK for JavaScript Sqs Client for Node.js, Browser and React Native
9.4/10+2.9 vs this tool
9.4
lodash
Lodash modular utilities. Keywords: modules, stdlib, util. 663M monthly downloads. License: MIT
9.4/10+2.9 vs this tool
9.4
@reduxjs/toolkit
The official, opinionated, batteries-included toolset for efficient Redux development
9.4/10+2.9 vs this tool
Know what your tools are really doing.