picomatch
Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.
No LLM SDK, agent framework or MCP dependency in its latest release, and none among the tracked dependencies.
Advisories
Advisories that name picomatch as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
No advisory in the database names this package.
Dependencies of the latest release
As declared in npm metadata for version 4.0.7. Optional extras are listed with their extra name.
No runtime dependencies recorded.
Tracked packages that depend on it
Among the packages in the registry; not every dependent on npm.