promptfoo
LLM eval & testing toolkit
Declares an LLM dependency since 2023-07-10 (version 0.17.3).
Advisories
Advisories that name promptfoo as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
No advisory in the database names this package.
Dependencies of the latest release
As declared in npm metadata for version 0.124.1. Optional extras are listed with their extra name.
- aiVercel AI SDK
- @anthropic-ai/sdkAnthropic SDK
- openaiOpenAI SDK
- acorn
- ajv
- ajv-formats
- @apidevtools/json-schema-ref-parser
- async
- binary-extensions
- cache-manager
- chalk
- chokidar
- cli-progress
- cli-table3
- commander
- compression
- cors
- csv-parse
- csv-stringify
- dedent
- drizzle-orm
- express
- exsolve
- fast-deep-equal
- fastest-levenshtein
- fast-safe-stringify
- fast-xml-parser
- gcp-metadata
- glob
- @hono/node-server
- http-z
- @inquirer/checkbox
- @inquirer/confirm
- @inquirer/core
- @inquirer/editor
- @inquirer/input
- @inquirer/search
- @inquirer/select
- istextorbinary
- json5
- js-rouge
- js-yaml
- keyv
- keyv-file
- @libsql/client
- lru-cache
- mathjs
- minimatch
- nunjucks
- opener
- @opentelemetry/api
- @opentelemetry/core
- @opentelemetry/exporter-trace-otlp-http
- @opentelemetry/resources
- @opentelemetry/sdk-trace-node
- @opentelemetry/semantic-conventions
- ora
- parse5
- posthog-node
- protobufjs
- proxy-agent
- proxy-from-env
- python-shell
- rfdc
- saxes
- semver
- signal-exit
- simple-git
- socket.io
- socket.io-client
- text-extensions
- tsx
- undici
- winston
- ws
- zod