huggingface-js
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches configuration and library code from Hugging Face's official NPM packages and a well-known CDN (jsdelivr). These are trusted resources for providing machine learning functionality.\n- [CREDENTIALS_UNSAFE]: Recommends using environment variables (HF_ACCESS_TOKEN) for authentication, which is a standard security best practice for managing API keys.\n- [COMMAND_EXECUTION]: Includes standard npm commands to install legitimate machine learning libraries from the public registry.
Audit Metadata