# npm Registry: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 2 judge labels across 1 category by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/npm-registry

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Artifact and container registries](https://www.gane.ai/index/it/developer/artifact-and-container-registries/index.md) | 0% | 62 | 50% | 2 |

## And against it

- "npm Registry | Malicious packages, token theft campaigns" (Kimi K2, Artifact registries)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 1 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named npm Registry, from 2 of the 3 answers that named it (only the models that return a source list).

### Domains cited

- github.com: 2
- jfrog.com: 2
- blog.qualys.com: 1
- cloudrepo.io: 1
- dev.to: 1
- docker.com: 1
- docs.aws.amazon.com: 1
- docs.github.com: 1
- docs.snyk.io: 1
- gecko.security: 1

### Pages cited

- https://blog.qualys.com/product-tech/2026/01/22/public-container-registry-security-risks-malicious-images: 1
- https://cloudrepo.io/articles/artifact-management-guide: 1
- https://dev.to/wenping/how-to-choose-an-artifact-repository-nexus-artifactory-and-self-hosted-angusrepo-by-team-size-5f4g: 1
- https://docker.com/blog/docker-jfrog-partner-to-further-secure-docker-hub: 1
- https://docker.com/blog/trivy-supply-chain-compromise-what-docker-hub-users-should-know: 1
- https://docker.com/blog/what-is-software-supply-chain-security: 1
- https://docs.aws.amazon.com/he_il/AmazonECS/latest/developerguide/security-tasks-containers.md: 1
- https://docs.github.com/en/enterprise-server@3.21/packages/working-with-a-github-packages-registry/working-with-the-container-registry: 1

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.