Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/Packages/Is colors safe?

Is colors safe to use?

Use with caution

Verdict for colors based on Gold's security & health signals.

20
safety score

Why

  • OpenSSF/maintenance health grade: F.
  • No known vulnerabilities in the Gold index.
0
Known CVEs
0
Critical / High
No
Actively exploited
F
Health grade
Full package report

Safer alternatives

colors was affected by a maintainer-sabotage incident — prefer smaller, stable coloring libs.

chalk picocolors

▪ Common questions

Is colors safe to use?
Use with caution. OpenSSF/maintenance health grade: F. Based on 0 known vulnerabilities and its OpenSSF health grade F.
Does colors have known vulnerabilities?
No known vulnerabilities are recorded for colors in the Gold index. Dependencies change, so re-check periodically.
What can I use instead of colors?
colors was affected by a maintainer-sabotage incident — prefer smaller, stable coloring libs. Consider: chalk, picocolors.

Check every dependency, not just this one

Get a verdict like this for your entire project — continuously — with automated fix PRs and policy gates in CI.

Scan my project free See pricing

This verdict is generated from public data (known vulnerabilities, CISA KEV, OpenSSF Scorecard, and maintenance signals) and is guidance, not a guarantee. Always confirm which version you use with the full report and scan your actual manifest.