// latest version · license · dependencies · downloads — straight from the npm registry
It queries the public npm registry (registry.npmjs.org) directly from your browser and shows the latest version, license, publish date, direct dependencies, and repository/homepage links for any published package — no install required.
Every npm install pulls in that package's entire dependency tree, not just the package itself. A package with a handful of direct dependencies can easily resolve to hundreds of transitive packages once everything downstream is counted. Checking the direct dependency count before installing gives you a quick sense of how much you're actually adding to your project.
Publish date matters too — a package that hasn't been updated in years may be abandoned, unpatched for known vulnerabilities, or incompatible with current Node/browser versions. License matters for anything shipped commercially: GPL-family licenses carry different obligations than MIT or Apache-2.0.
registry.npmjs.org — the same source the npm CLI itself reads from. Nothing is cached or modified; you're seeing the live registry metadata.npm ls --all locally for the complete tree.npm view <package> version, or npm show <package> versions to list every version ever published.