npm
picomatch
v4.0.7
RESOLVED
Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.
Installation
npm install picomatch@4.0.7Add a Gold badge to your README
[](https://gold.safeguard.sh/package/npm/picomatch)0
Vulnerabilities
Gold Verification
ATTESTATION L0Meets the Gold bar from automated verification.
No high or critical vulnerabilitiesNo known vulnerabilities.
License identifiedLicense not identified in metadata.
Verified provenanceSource repository is linked and traceable.
Malware-freePassed Safeguard malware screening.
Last indexed: 2026-10-17T08:32:04Z
How Gold is determined →Package health
B6.8/10
OpenSSF Scorecard rates this project's security posture — supply-chain hygiene, maintenance, and review practices.
Updated this month
Maintained10/10
Dangerous Workflow10/10
Code Review5/10
Security Policy10/10
Branch Protection0/10
Fuzzing0/10
Pinned Dependencies6/10
Source: OpenSSF Scorecard · scored 2026-10-19
Package Information
License—
Last Updated2026-10-17T08:32:04Z
First Published2026-10-17T08:32:04Z
Size—
Maintainer—
Scanned Release
Current Version
4.0.7
2026-10-17T08:32:04Z