# npm audit: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 2 judge labels across 1 category by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/npm-audit

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 53 | 50% | 2 |

## And against it

- "all failed to detect vulnerabilities in cloned or shaded components" (MiniMax M2.5, SCA)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 1 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named npm audit, from 6 of the 7 answers that named it (only the models that return a source list).

### Domains cited

- gane.ai/index: 3
- linuxfoundation.org: 3
- safeguard.sh: 3
- checkmarx.com: 2
- dependency-check.github.io: 2
- mazehq.com: 2
- project.linuxfoundation.org: 2
- securityboulevard.com: 2
- sonatype.com: 2
- sscsecurity.dev: 2

### Pages cited

- https://linuxfoundation.org/hubfs/Reports/An-Open-Guide-To-Evaluating-Software-Composition-Analysis-Tools_V2.pdf: 3
- https://dependency-check.github.io/DependencyCheck: 2
- https://www.gane.ai/index/it/developer/software-composition-analysis/smb: 2
- https://mazehq.com/learn/sca-tools: 2
- https://project.linuxfoundation.org/hubfs/Reports/An-Open-Guide-To-Evaluating-Software-Composition-Analysis-Tools_V2.pdf: 2
- https://sscsecurity.dev/book2/chapter-12/ch-12.6: 2
- https://arxiv.org/html/2306.05534v2: 1
- https://arxiv.org/html/2604.21278v1: 1

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.